The appliance secret you created from the application registration portal for the app. Will not use the appliance top secret in a local application or single page app due to the fact a client_secret can't be reliably stored on products or Websites. It really is expected for web applications and