The application top secret that you just designed during the app registration portal on your application. Will not use the applying secret in a native app or single website page application because a client_secret can't be reliably stored on gadgets or web pages. It really is expected for Website apps and web APIs, which may shop the client_secret