How to store client id and secret in html / js clients for OAuth 2.0

I recently implemented OUTH 2.0 (with tastypie ) to my API. Now I am creating emberjs based on JS client. How can I securely store Client ID and Client Secret? Local storage, which I would guess, doesn't help, as the user can just get the client id and secret easily. The same goes for storing cookies. I've been trying to research best practices for a while, but I can't find anything. Any thoughts on how others are solving this problem? Any resources would be much appreciated.

+3


source to share





All Articles