What is the best way to safeguard a client secret in a JavaScript application in order to ensure it is inaccessible to unauthorized users? Specifically, I am working with an AngularJS SPA.
In my case, the client secret is a guid created during login and transmitted back to the client. It expires after 15 minutes of inactivity.
Given the sensitive nature of my secret key, how important is it for me to take precautions?