The application secret that you simply established from the app registration portal for your application. Don't use the application top secret in a local application or one page app because a client_secret cannot be reliably saved on equipment or Websites. It is really required for World-wide-web apps and Internet APIs, https://river73746.jts-blog.com/31467591/5-simple-statements-about-tentenbet-site-explained