Merge pull request #29166 from nextcloud/backport/29122/stable20

[stable20] Tokens without password should not trigger changed password invalidation

lib/private/Authentication/Token/DefaultTokenProvider.php

@@ -225,7 +225,7 @@ class DefaultTokenProvider implements IProvider {
 	 */
 	public function getPassword(IToken $savedToken, string $tokenId): string {
 		$password = $savedToken->getPassword();
-		if (is_null($password)) {
+		if ($password === null || $password === '') {
 			throw new PasswordlessTokenException();
 		}
 		return $this->decryptPassword($password, $tokenId);