Should the Auth token and/or client ID be secret?

So I’ve tried to do this: (Note: I’m trying to get the token with a GET request)
https://id.twitch.tv/oauth2/authorize?client_id=ClientIdHere&redirect_uri=localhost&response_type=token&scope=
But it doesn’t seem to work, it returns some weird value and if I put it in the browser it takes me to this: https://prnt.sc/102t4e5
Am I doing something wrong?