title: Laravel 5.4 passport password grant tokens
body: <p>I am learning laravel 5.4 api authorization chapter. I have a question about password grant tokens. The doc said this is for my other first-party clients. And now I build an api service, it uses OAuth2. Now I want to build my front end website, and I want to use password grant tokens. So in my understanding, like login, I will send an ajax request including username,password,grant_type,client_id,client_secret,scope to <code>/oauth/tokens</code> to get access token. Should I just put client secret in my js code directly? Because if not, I don't know where to store my client secret, someone can help me? Thanks.</p>