Gmail OAuth client_id is not a secret â design notes for self-host Actors

«This question keeps coming up: "My Gmail OAuth client_id got leaked. Is the system compromised?" Short answer: client_id was never a secret. What you actually need to protect is the token, the client_secret (if your ...»