What is the purpose of APP_SECRET in v2?

[philipkd]

I'm migrating Permanote (formerly Nebulous Notes) to v2, and in doing some housekeeping, I noticed that the APP_SECRET is not used anywhere. I've been getting by without it for a couple of months now. I also checked the DBRoulette sample app, and it too doesn't seem to use the Secret.

Is this something to do with 0Auth2 not needing it? I'm just curious, so I can remove it from my code for good if it's truly un-needed. Or maybe I do need it?

[Greg-DB · Accepted solution]

That's correct, when using the OAuth 2 'token' flow, such as in client-side apps like on iOS, the app secret is not necessary.

[philipkd]

Thanks for the quick reply Greg!

[philipkd]

Follow-up question:

The Obj-C SDK suggests running this line for migration:

[DBClientsManager checkAndPerformV1TokenMigration:]

However, I don't see that in the SDK code.

[Greg-DB · Accepted solution]

The checkAndPerformV1TokenMigration method is defined in the SDK, but it's relatively new, so make sure you have the latest version installed.