Oauth 2 Specification, Section 2.2. (Client Identifier) states -
The authorization server issues the registered client a client identifier -- a unique string representing the registration information provided by the client. The client identifier is not a secret; it is exposed to the resource owner and MUST NOT be used alone for client authentication. The client identifier is unique to the authorization server.
My question is whether the
Client ID should be unique for each end user or only by client type?
For example if I have a native app client, should each app install get it's own
client ID or should all apps get the same
And is it the same for the