The application top secret that you designed during the app registration portal for the application. Really don't use the application secret in a native app or one website page app since a client_secret cannot be reliably stored on products or Websites. It's demanded for Net apps and Net API