https://github.com/MountainRiderAK/TwitchChatBot/commit/0c68d2a7e55408938b24736f278dfd1e59c51be8 Line 52 contains your Client Secret.
In fact this commit has your client secret in a few places.
Your Client Secret is like a password. It shouldn’t be released publically.
You should also, where possible generate an use an Access Token till it expires and not generate one for each request to the API. But at a skim you seem to only do this when making a new webhook subscription so that’s “ok”, just frowned upon
Additionally: having looked at your code, you could of used {self.tim_token} as this would of been a valid oAuth token for the API, you’d just have to remove oauth: from the start. A token that allows a user to login to twitch chat, could of been used to set up the follower webhook.