Karl

Have you read [this section of the (android) readme](https://github.com/openid/AppAuth-Android/blob/master/README.md#utilizing-client-secrets-dangerous)? Also, you’re probably being required to use client_secret_jwt because that’s what is configured in the idp for your client. Worth checking/asking...