That’s correct. Client ID is public information. The security around use of the Client ID is based around the use of the redirect URI, so just make sure your Redirect URI is to a service that you own.
That’s correct. Client ID is public information. The security around use of the Client ID is based around the use of the redirect URI, so just make sure your Redirect URI is to a service that you own.