The appliance secret that you produced during the app registration portal in your app. Don't use the application secret in a local application or one web page app because a client_secret cannot be reliably saved on devices or Web content. It can be expected for Net applications and World-wide-web APIs, https://erickm48yx.qodsblog.com/32634063/5-simple-statements-about-tentenbet-domain-explained