From 4f5974dd37642bd506b014226149f01d2d2b80b9 Mon Sep 17 00:00:00 2001
From: Dan Milne <d@nmilne.com>
Date: Tue, 4 Nov 2025 21:33:52 +1100
Subject: [PATCH] bah

---
 app/models/application.rb | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/app/models/application.rb b/app/models/application.rb
index 63c065c..d4d71e9 100644
--- a/app/models/application.rb
+++ b/app/models/application.rb
@@ -13,7 +13,7 @@ class Application < ApplicationRecord
   validates :app_type, presence: true,
                       inclusion: { in: %w[oidc forward_auth] }
   validates :client_id, uniqueness: { allow_nil: true }
-  validates :client_secret, presence: true, if: -> { oidc? && will_save_change_to_client_secret? }
+  validates :client_secret, presence: true, if: -> { oidc? && new_record? }
   validates :domain_pattern, presence: true, uniqueness: { case_sensitive: false }, if: :forward_auth?
   validates :landing_url, format: { with: URI::regexp(%w[http https]), allow_nil: true, message: "must be a valid URL" }