Passing clientSecret when initializing OAuth2 to be more compatible with Oauth2 RFC Section 2.3 (if the authorization server requires authentication, pass clientId and clientSecret in basic auth or in body)
Passing clientSecret when initializing OAuth2 to be more compatible with Oauth2 RFC Section 2.3 (if the authorization server requires authentication, pass clientId and clientSecret in basic auth or in body)

leftmostcat/passport-oauth2-password-grant