If it's a FOSS clientside application, like a mobile or desktop app, it's a publ...

		tptacek on May 5, 2020 \| parent \| context \| favorite \| on: OAuth 2.0 Security Best Current Practice If it's a FOSS clientside application, like a mobile or desktop app, it's a public application and the client secret doesn't really apply. If it's a serverside application, a web app, then every instance of the app will be registered independently with auth servers, and will manage their own client secrets.