I’m trying to make an api call for Spotify but it is not working right now. From Oauth2 i don’t think we are supposed to pass the clinent secret but i have this error

(base) ivoryle@dyn234000 Ivoryle82.github.io % curl -X POST
-H “Content-Type: application/x-www-form-urlencoded”
-d “client_id=b4c01840ec424a1aa275703fc29b8fac”
-d “grant_type=authorization_code”
-d “code=AQAjPlofVWr3-Z8eXgMCxA6lupNkqMixFECInJVP3GMbxnbteinhOaebmGE5g3JUUsjyuv06EY-BGa00y1L-uLMhOFr7jtUAAdryNhtzDVO6lzDdjswGDbtuPCZWzOS3g-WJcfICUbAox2Pv7F335aG18ONOvCMmBZ2l-vASnYbZo6yPiNY6bEICddEBarZQZ4pKFxe4yZnbJCJUMpHlffsdSJxtAsAQRdW_”
-d “redirect_uri=http://localhost:3000/compatibility”
https://accounts.spotify.com/api/token

{“error”:”invalid_request”,”error_description”:”Invalid client secret”}%

Anyone know why ?

I searched it up and it is a really bad practice to put your client secret up