jaredhanson/passport-oauth2 — pull request #20 by Tug (2014-09-18 16:53:33+00:00)
Title: Allow empty string for clientSecret

According to specs http://tools.ietf.org/html/rfc6749#section-2.3.1 client_secret MAY be an empty string