[GH-ISSUE #4970] [bug]: Removed value for environment variables persists in OAuth2.0 token generation in Hoppscotch #1882

New issue

Open

opened 2026-03-16 22:15:00 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 22:15:00 +03:00

Owner

Originally created by @rajkumar-cp on GitHub (Apr 8, 2025).
Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4970

Is there an existing issue for this?

I have searched existing issues and this bug hasn't been reported yet

Current behavior

When attempting to generate an OAuth2.0 token using Hoppscotch, the token generation succeeds even after the environment variables client_id and client_secret have been set to empty. This behavior is unexpected, as the token generation should fail without valid credentials

Steps to reproduce

Create environment variables client_id and client_secret and set them with valid values.
Use these variables in OAuth2.0 token generation in Hoppscotch.
Remove the values of client_id and client_secret by setting them to empty.
Attempt to generate the token again.

Expected Result:
Token generation should fail due to the absence of valid client_id and client_secret.

Actual Result:
Token generation is successful even when client_id and client_secret are empty.

Logs and Screenshots

Environment

Production

Hoppscotch Version

Self-hosted

Interceptor

Browser - Web App

Browsers Affected

Chrome

Operating System

Windows

Additional Information

No response

Originally created by @rajkumar-cp on GitHub (Apr 8, 2025). Original GitHub issue: https://github.com/hoppscotch/hoppscotch/issues/4970 ### Is there an existing issue for this? - [x] I have searched existing issues and this bug hasn't been reported yet ### Current behavior When attempting to generate an OAuth2.0 token using Hoppscotch, the token generation succeeds even after the environment variables client_id and client_secret have been set to empty. This behavior is unexpected, as the token generation should fail without valid credentials ### Steps to reproduce 1. Create environment variables client_id and client_secret and set them with valid values. 2. Use these variables in OAuth2.0 token generation in Hoppscotch. 3. Remove the values of client_id and client_secret by setting them to empty. 4. Attempt to generate the token again. Expected Result: Token generation should fail due to the absence of valid client_id and client_secret. Actual Result: Token generation is successful even when client_id and client_secret are empty. ### Logs and Screenshots ```shell ``` ### Environment Production ### Hoppscotch Version Self-hosted ### Interceptor Browser - Web App ### Browsers Affected Chrome ### Operating System Windows ### Additional Information _No response_