thomseddon/cakephp-oauth-server — pull request #34 by rchavik (2013-08-19 11:48:16+00:00)
Title: Fix: Hash passwords when 'client_secret' exists in POSTed data

Without this check, client_secret will be 'corrupted' in some cases, eg:
when updating redirect_uri (without specifying existing secret):

$this->Client->save(array(
'id' => 'foo',
'redirect_uri' => 'http://mysite.com',
));