The applying mystery that you designed in the application registration portal for your app. You should not use the appliance top secret in a local app or single site application since a client_secret can't be reliably saved on products or web pages. It's expected for web applications and Internet APIs, which may retailer the client_secret securely