Users being able to see your client_id is not an issue, and is perfectly normal. Your client secret, and any OAuth tokens that your app receives, are private though so you do need to keep them secure.
2 Likes