What the need of the client secret in the Web3Auth Dashboard?

While making a new application, I saw two values being given in the Plug and Play section. I know the Web3Auth constructor needs a Client ID, but I never used a client secret. What's the use case for that? When should I use it? Is there a security concern about exposing my client id and client secret?

Asked by multiple people on Telegram/ Discord channels.



Originally posted by: yashovardhan

Check the discussion at: https://github.com/orgs/Web3Auth/discussions/671