The application mystery you made from the app registration portal in your application. Never use the applying secret in a local app or solitary web site app simply because a client_secret cannot be reliably saved on equipment or web pages. It is really needed for web apps and web APIs, which often can shop the client_secret securely over the server