The application secret that you choose to made while in the app registration portal on your app. Really don't use the application top secret in a native application or one website page application because a client_secret cannot be reliably stored on equipment or web pages. It is really expected for Internet apps and web APIs, which can retail store