jjnford / chrome-ex-oauth2 Goto Github PK

In step 2, you outline that I need to have these tokens:

        access_token_url: "{your-access-token-url}",
        authorization_url: "{your-authorization-url}",
        client_id: "{your-client-id}",
        client_secret: "{your-client-secret}",
        redirect_url: "{your-redirect-url}",
        scopes: [{your-array-of-scopes}],

Do you know the best way to get these? What if my extension doesn't have a redirect url, or I am working in development mode?

this implementation looks great.
but I have a question.
chrome extension is distributed in ZIP with javascript source inside.
is there any way to avoid my client secret being exposed?