The application key which you established in the application registration portal for your application. Don't use the application secret in a local application or single page app for the reason that a client_secret can't be reliably stored on equipment or Web content. It is expected for web apps and Net APIs, which often can retail store the client_