SC-300 Web TestEngine demo

Register the exact public-client redirect URI and do not use a client secret.

Omit the redirect URI because the application ID determines the return location.

Store a long-lived client secret in the browser so the public client can authenticate confidentially.

Create the registration and assume it automatically grants all required API permissions.