stacklok / toolhive / 19064659256

51%

push

github

Skip OAuth secret processing when empty (#2445)

Avoids calling ProcessOAuthClientSecret when no client secret is
provided, preventing unnecessary access to the secrets manager in
environments without secrets configuration.

This implements defense-in-depth by checking for empty secrets at
both the call sites and within the function itself.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

4 of 16 new or added lines in 2 files covered. (25.0%)

21766 of 45139 relevant lines covered (48.22%)

37.47 hits per line