Issues in getting access_token fromm OAUTH flow

[r2d2]

Hi,
You would find this response helpful

Is there a way to consume API using OAuth without passing the `client_secret` that'd be held browser side?

Hey @maxime1992 Welcome to the community You are right that the client_secret should not be exposed. The client_id and client_secret information is used to identify the app that is requesting authorization (consent from the user). It is the responsibility of the app to maintain the confidentiality of the client_secret (Ref. rfc6749) Depending on whether the user has granted the consent, the app is expected to exchange the authorization code for access + refresh token. This commu…

Feel free to create a new topic if you still face issues.