Client ID is public and can be shipped with the application to clients.
Client secret is private and should only be used on your backend server (if you use one) in a way inaccessible to others. Not all applications need to use the client secret.
1 Like