The application magic formula that you simply developed inside the application registration portal on your application. Will not use the applying top secret in a native application or single web site app for the reason that a client_secret cannot be reliably stored on devices or Web content. It's expected for Net applications and World wide web API