Practically speaking how does this line work securely? const clientSecret = "my_client_secret"; //where does the my client secret actually come from? //s

Practically speaking how does this line work securely? const clientSecret = "my_client_secret"; //where does the my client secret actually come from? //surely client secret is not hard coded?