What is the purpose of APP_SECRET in v2?

Question

I'm migrating Permanote (formerly Nebulous Notes) to v2, and in doing some housekeeping, I noticed that the APP_SECRET is not used anywhere. I've been getting by without it for a couple of months now. I also checked the DBRoulette sample app, and it too doesn't seem to use the Secret.

Is this something to do with 0Auth2 not needing it? I'm just curious, so I can remove it from my code for good if it's truly un-needed. Or maybe I do need it?

Greg-DB · Accepted Answer

That's correct, when using the OAuth 2 'token' flow, such as in client-side apps like on iOS, the app secret is not necessary.

Greg-DB · Accepted Answer

The checkAndPerformV1TokenMigration method is defined in the SDK, but it's relatively new, so make sure you have the latest version installed.