Need help getting client secret

Or, slightly better yet: Into a config file or Environment Variable.

Hard-Coding it is good for testing, but make sure to not accidentally share your secret, for example by pushing your code to a public github repository.