Check for public client to skip client_secret validation