Every app has a unique client secret. This is a sensitive value that's shared between Canva and your app. You need this secret to verify request signatures.
To get your app's client secret:
Navigate to an app via the Developer Portal.
Open the Verification page.
Under the Client secret field, select Copy.