The applying mystery you established within the app registration portal in your application. Don't use the application magic formula in a local app or single web site app since a client_secret cannot be reliably stored on devices or Web content. It can be demanded for Website apps and Internet APIs, which may retail store the client_secret securely