The application secret you made inside the app registration portal for your application. Don't use the application top secret in a local application or single webpage app simply because a client_secret cannot be reliably saved on units or Websites. It can be demanded for World-wide-web apps and Net APIs, which could retail store the client_secret s