hey @maple3142 you may want to check out and scrub lines 25 & 26 in the file index.js where your "client_id" & "client_secret" values are exposed.

this page https://docs.replit.com/programming-ide/storing-sensitive-information-environment-variables shows how to (easily) keep the secret(s), um, secret.

also, fyi, i found the same information (client_id & client_secret) in the github repo for the project, in the worker.js file. you can find information on hiding secrets in github repos here: https://docs.github.com/en/actions/security-guides/encrypted-secrets

good luck & don't hesitate to reach out if you want a hand with any of this.