Client secret

What is a client secret? Why use one?
Every app has a unique client secret. This is a sensitive value that's shared between Canva and your app. You need this secret to verify request signatures.
To get your app's client secret:
  1. 1.
    Navigate to an app via the Developer Portal.
  2. 2.
    Open the Verification page.
  3. 3.
    Under the Client secret field, click Copy.
We recommend storing client secrets as environment variables.
You should never share a client secret or commit it to source control.