OAuth sign-in: Swagger uses PKCE as a public client. No client secret is required—leave the Client Secret field blank.