Client ID can be exposed in your front end or client side applications.
Client secret should not be exposed.