fix: Omit empty assertion fields in client creds request (#745)

jonyoder · web-flow · commit 71b7500c62b3 · 2025-07-02T12:34:13.000Z
diff --git a/pkg/oidc/token_request.go b/pkg/oidc/token_request.go
@@ -240,6 +240,6 @@ type ClientCredentialsRequest struct {
 	Scope               SpaceDelimitedArray `schema:"scope"`
 	ClientID            string              `schema:"client_id"`
 	ClientSecret        string              `schema:"client_secret"`
-	ClientAssertion     string              `schema:"client_assertion"`
-	ClientAssertionType string              `schema:"client_assertion_type"`
+	ClientAssertion     string              `schema:"client_assertion,omitempty"`
+	ClientAssertionType string              `schema:"client_assertion_type,omitempty"`
 }

Original file line number	Diff line number	Diff line change
`@@ -240,6 +240,6 @@ type ClientCredentialsRequest struct {`
`240`	`240`	Scope SpaceDelimitedArray `schema:"scope"`
`241`	`241`	ClientID string `schema:"client_id"`
`242`	`242`	ClientSecret string `schema:"client_secret"`
`243`		- ClientAssertion string `schema:"client_assertion"`
`244`		- ClientAssertionType string `schema:"client_assertion_type"`
	`243`	+ ClientAssertion string `schema:"client_assertion,omitempty"`
	`244`	+ ClientAssertionType string `schema:"client_assertion_type,omitempty"`
`245`	`245`	`}`