AUT-922 Fix send signing secret by email

e-gov · May 5, 2022 · 4c39726 · 4c39726
1 parent 41e9352
commit 4c39726
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 4 deletions.
diff --git a/tara-admin-api/src/main/java/ee/ria/tara/service/ClientsService.java b/tara-admin-api/src/main/java/ee/ria/tara/service/ClientsService.java
@@ -146,9 +146,10 @@ private void saveClient(Client client, String registryCode, String uri, HttpMeth
 
         if (shouldGenerateNewSecret(client)) {
             assertValidIdCode(client.getClientSecretExportSettings());
+            String newSecret = SecureRandomAlphaNumericStringGenerator.INSTANCE.generate(SIGNING_SECRET_LENGTH);
+            client.setSecret(newSecret);
             clientSecretEmailService.sendSigningSecretByEmail(client);
 
-            String newSecret = SecureRandomAlphaNumericStringGenerator.INSTANCE.generate(SIGNING_SECRET_LENGTH);
             hydraClient.setClientSecret(hashSecret ? ClientHelper.getDigest(newSecret) : newSecret);
             oidcService.saveClient(hydraClient, uri, httpMethod);
         }

diff --git a/tara-admin-api/src/main/resources/client-secret-txt-template.ftl b/tara-admin-api/src/main/resources/client-secret-txt-template.ftl