Need help with client id and client secret
Closed this issue · 2 comments
OogieBoogieInJSON commented
ealeksandrov commented
http://stackoverflow.com/questions/19615372/client-secret-in-oauth-2-0
Client id and client secret are used to identify what my app is. But they must be hardcoded if it is a client application.
Client credentials = credentials for an App, not for a user. Usually I keep different client credentials for each major version of my mobile app, so I can easily switch off old compromised versions.
ealeksandrov commented
Yes, that's right.