Should the Auth token and/or client ID be secret?

Thanks for the fast reply! :slight_smile:
Do you know what I can do to fix this?
Since if I create an “autoupdator” for the token to create a new token when it expires, my client secret wouldn’t be very secret anymore.
And also, if I create a file with the token or client secret, that also breaks the point of it being secret.