removes client secret

backend/playlist/urls.py

@@ -19,6 +19,7 @@ urlpatterns = [
     path('api/vote/', views.VoteListView.as_view(), name="api-votes"),
     path('api/vote/<id>', views.VoteDetailView.as_view(), name="api-vote"),
     path('api/user/', views.UserListView.as_view(), name="api-users"),
+    path('api/user/<int:id>', views.UserDetailView.as_view(), name="api-user"),
     path('api/profile/me', views.ProfileMeView.as_view(), name="api-profile-me"),
 
     ### Classic

frontend/src/config/auth.ts

@@ -7,7 +7,6 @@ const REDIRECT_URI = `${ORIGIN_URI}/auth/callback`;
 const userConfig: AuthProviderProps = {
   authority: process.env.NEXT_PUBLIC_AUTHORITY!,
   client_id: process.env.NEXT_PUBLIC_CLIENT_ID!,
-  client_secret: process.env.NEXT_PUBLIC_CLIENT_SECRET!,
   redirect_uri: REDIRECT_URI,
   response_type: "code",
   //includeIdTokenInSilentRenew: true,