I disagree - there is no way to securely store security tokens (both the client secret and the access token) in client side code. There should always be a serv

I disagree - there is no way to securely store security tokens (both the client secret and the access token) in client side code. There should always be a server side proxy so that this data doesn't leak