The application top secret you made within the app registration portal for the application. Really don't use the applying solution in a native application or single site app since a client_secret can't be reliably stored on equipment or Websites. It can be needed for World wide web apps and World wide web APIs, which could retail store the client_s