What's the Secret of a Client Application?

The assumption is in a lot of cases you have what's called a static registration. So a developer orsys admin for the client application pulls up a console and sends in an application. And then at the end of that, they get issued an identifier and a secret which identifiers what gets sent through the browser when the user gets redirected. That's how we know that it's at least probably going to be this application that's asking for it - though it is a public piece of information.