Safely distribute OAuth 2.0 client_secret in desktop applications in Python
问题 I was looking for some best practices sample code about how to design and create my own desktop app (or installed app) in Python requiring OAuth 2.0 Authorization flow to Google, and found this repository provided by Google : https://github.com/googlesamples/oauth-apps-for-windows (coded in C#, but anyway the design should be the same). When diving into the code, I was surprised to see that the client_secret was directly embedded, in clear, into the source code (take a look here : https:/