Whats stopping me stealing client id's?

What stops people from effectively using your Client ID is the redirect URI. If you have concerns about rate limits, send a Bearer token with your requests. For requests on behalf of users, their user access token. For other requests, an app access token (client_credentials).

1 Like