The application secret you developed in the app registration portal in your application. Do not use the application secret in a native application or one website page app for the reason that a client_secret can't be reliably stored on gadgets or web pages. It is really necessary for web apps and World wide web APIs, that may keep the client_secret