For any other types of app than Web App, google doesn't produce Client Secret. If you really need client secret, then you must set your application type web.