omit client secret

The client MAY omit the parameter if the client secret is an empty string.