change(openid-connect): when bearer_only is false, require the user to fill in session.secret
#11694
semantic.yml
on: pull_request_target
Validate PR title
7s