The application mystery you established from the application registration portal to your application. Never use the appliance secret in a local application or single page application simply because a client_secret cannot be reliably saved on equipment or Websites. It is really expected for Net apps