Where to put Client ID and Client Secret in the Request Message?

Answer

The Client ID and Client Secret can be put in one of the two places namely in the parameter list of URL or in the HTTP Headers as shown below.?

For security it is more secure to put in the HTTP Headers thus it will not accidentally bookmarked or send to someone unintentionally.?

Here are the two ways:

(1) In URL:???????????????????????????????????????????????????????????????????????????????????????????????????????????????? ??????????? (2) In HTTP Headers:

client_id=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx???????????????????????????????????????????????????????????? ? ?? -H "X-IBM-Client-Id:xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
client_secret=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx???????????????????????? ? ? -H "X-IBM-Client-Secret:Client Secret:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

Although Client ID is not a secret it will be good not to share as others may use to access those APIs that does not require Client Secret and count the traffic under the Client ID.