I\'m implementing an OAuth2 provider, and I would like to have an area somewhere in my web site where developers log on and register third party apps. But I\'m having doubts on
The specs are not clear about how you should generate them, but they say that you they should be random strings and unique.
In the section #2.2, about the client identifier:
The authorization server issues the registered client a client identifier - a unique string representing the registration information provided by the client.