The applying top secret you made from the application registration portal for the app. You should not use the application solution in a local app or solitary web site application for the reason that a client_secret cannot be reliably stored on devices or web pages. It is needed for Internet apps and