fix: client-secret should only be present when string literal provided for oidc

fix: client-secret should only be present when string literal provided for oidc #5715