Who holds the client secret?
keryx posts to TikTok and YouTube on your behalf, which meant I had to answer a question every OAuth tutorial skips: who actually holds the client secret? They all assume you’re a server that can keep one, and never say …
