diff --git a/dashboard/src/guest.rs b/dashboard/src/guest.rs
index 513bcdddb103249ec37eed04c60d06ba1a022b8d..ff3a9d367ebcec95bec221c74f15be407ce9f7e9 100644
--- a/dashboard/src/guest.rs
+++ b/dashboard/src/guest.rs
@@ -249,14 +249,13 @@ async fn exchange(
 ) -> Result<(String, String)> {
     let form = [
         ("client_id", client),
+        ("client_secret", secret),
         ("grant_type", "authorization_code"),
         ("code", code),
         ("redirect_uri", callback),
         ("code_verifier", string(&flow["verifier"])),
     ];
     if provider == "github" {
-        let mut form = form.to_vec();
-        form.push(("client_secret", secret));
         let token = json_bytes(
             &response_bytes(
                 http.post("https://github.com/login/oauth/access_token")
@@ -309,7 +308,6 @@ async fn exchange(
     let token = json_bytes(
         &response_bytes(
             http.post(format!("{ASTHENO}/api/token"))
-                .basic_auth(client, Some(secret))
                 .form(&form)
                 .send()
                 .await?,