What is client_id, client_secret and where can I get it?

Question

Laravel

Hello!

I just can't figure out how to do authorization through laravel passport?
When I get to the moment when he logs in to the postman, such fields as client_id, client_secret, grant_type appear. Where is this to be taken from?

That is, if I want to log in at my front and send a request, then where do I send this data there and what does it mean? I've already read a lot of things, but I can't seem to get it at all...

Answer 1

Let's start with the fact that if you have a front, then you need to use Implicit Flow, and even better - PKCE for OAuth 2.0 ( with pictures ). There is no client secret used by definition. You cannot use it at the front, because it is a public (i.e. untrusted) client.
Of course, if the task is really to log in directly from the front, and not through your backend, as is done in simple cases like "linking" accounts on other resources..