diff --git a/oauth2.go b/oauth2.go
index <HASH>..<HASH> 100644
--- a/oauth2.go
+++ b/oauth2.go
@@ -308,7 +308,7 @@ func retrieveToken(ctx context.Context, c *Config, v url.Values) (*Token, error)
 		return nil, err
 	}
 	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
-	if !bustedAuth && c.ClientSecret != "" {
+	if !bustedAuth {
 		req.SetBasicAuth(c.ClientID, c.ClientSecret)
 	}
 	r, err := hc.Do(req)
oauth2: remove unnecessary ClientSecret check

Since the empty client secret is permitted by the OAuth <I> spec.
The check for clientSecret in retriveTokoen is unnecessary.

Redo #<I>