The application top secret you produced within the app registration portal on your app. You should not use the application magic formula in a local application or one page application mainly because a client_secret can't be reliably stored on devices or Websites. It is necessary for Internet apps and web APIs, which often can keep the client_secret