The applying mystery that you choose to made from the app registration portal for your app. Never use the application mystery in a native app or single webpage app since a client_secret cannot be reliably saved on products or web pages. It is really necessary for web apps and Net APIs, that may retailer the client_secret securely around the server