SpringSource/spring-security-oauth — pull request #35 by joeldsa (2012-05-12 00:05:37+00:00)
Title: Separate the dynamic client registration API client update from the client password update

In an oauth server, we don't normally return the client secret when someone requests the client details.

If, for example, someone wants to add a redirect URI to the client information on an oauth server, say they fetch the client details, add the redirect URI and update, they will end up setting the client_secret to an empty value. So, in order to update the client information, the server would need to store the secret so that it can retain the same value on subsequent updates.

Having the client secret updated separately from the rest of the client information is therefore required.