This issue has been created
 
 
OpenId Connect / cid:jira-generated-image-avatar-4f642bec-432b-475e-af77-de447bb042cc OIDC-313 Open

Forbid empty tokens

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-13469528-d2e9-4934-9117-96d5415a422b Thomas Mortagne created this issue on 04/Sep/26 17:58
 
Summary: Forbid empty tokens
Issue Type: cid:jira-generated-image-avatar-4f642bec-432b-475e-af77-de447bb042cc Improvement
Affects Versions: 2.25.4
Assignee: Unassigned
Components: Consent
Created: 04/Sep/26 17:58
Priority: cid:jira-generated-image-static-major-31a33650-c6e2-4b7d-b3f1-bdbb400709bb Major
Reporter: Thomas Mortagne
Description:

While the UI does not allow it, it's technically possible to create empty token right now. There is no use case where this really make sense, so let's avoid some bad code to introduce a vulnerability.