ealeksandrov/NodeAPI

Need help with client id and client secret

Closed this issue · 2 comments

http://stackoverflow.com/questions/19615372/client-secret-in-oauth-2-0

Client id and client secret are used to identify what my app is. But they must be hardcoded if it is a client application.

Client credentials = credentials for an App, not for a user. Usually I keep different client credentials for each major version of my mobile app, so I can easily switch off old compromised versions.

Yes, that's right.