diff --git a/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/client/RegisteredClient.java b/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/client/RegisteredClient.java
index 94ff1ba2..ad52d0ca 100644
--- a/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/client/RegisteredClient.java
+++ b/oauth2-authorization-server/src/main/java/org/springframework/security/oauth2/server/authorization/client/RegisteredClient.java
@@ -90,10 +90,11 @@ public class RegisteredClient implements Serializable {
 	}
 
 	/**
-	 * Returns the client secret.
+	 * Returns the client secret or {@code null} if not available.
 	 *
-	 * @return the client secret
+	 * @return the client secret or {@code null} if not available
 	 */
+	@Nullable
 	public String getClientSecret() {
 		return this.clientSecret;
 	}