OAuth2 - Client Secret should not be required - "Resource Owner Password Credentials Grant"
This issue occurs when adding an OAuth2 authorization profile to a request. In the Get Access Token window with the OAuth 2 Flow selected as 'Resource Owner Password Credentials Grant' there is a field for client_secret. When left blank the following error occurs: "Invalid OAuth 2 parameters: Client Secret is empty" The problem with this is that the Password flow can be for both confidential and public client types. My client type is public and therefore my OAuth2 provider rejects the request when the client secret is passed.
ERROR:An error occurred [org.apache.oltu.oauth2.common.exception.OAuthSystemException: OAuthProblemException{error='invalid_request', description='credential is given for a public client', uri='null', state='null', scope='null', redirectUri='null', responseStatus=0, parameters={}}], see error log for details
The client secret should be changed to be an optional field.