A client ID is a unique identifier that tells an OAuth authorization server which application is requesting access. It identifies the client, but unlike a client secret, it is not treated as highly sensitive. section 7.4.1
In the authorization code flow, the client ID appears in the authorization URL. The authorization server binds the returned authorization code to that ID, and the client later supplies its secret when exchanging the code for an access token. section 7.4.1
The same identifier supports different OAuth interaction patterns:
- A web application sends it with parameters such as redirect_uri and response_type=code. section 7.4.1
- A smart TV or other input-constrained device includes it when requesting device and end-user codes, then uses it while polling. section 7.4.4
https://auth.example.com/authorize?response_type=code &client_id=s6BhdRkqt3&redirect_uri=https://example.com
Inspect the client ID in a concrete OAuth authorization URL. section 7.4.1
