diff --git a/go-oidc/main.go b/go-oidc/main.go
index 815b20d..8cbf2d6 100644
--- a/go-oidc/main.go
+++ b/go-oidc/main.go
@@ -268,10 +268,10 @@ func clearCookie(w http.ResponseWriter, name string) {
 }
 
 func maskToken(s string) string {
+	if s == "" {
+		return ""
+	}
 	if len(s) <= 8 {
-		if s == "" {
-			return ""
-		}
 		return "****"
 	}
 	return s[:8] + "..."