The application secret that you choose to established from the app registration portal for the app. Really don't use the applying secret in a local application or one website page app mainly because a client_secret cannot be reliably stored on devices or Web content. It really is demanded for Net applications and Net APIs, which might retail outlet