401 invalid client error

Don’t send the secret if the app is set to public. (It’s a little strange that OGS even hands out a secret for public apps!)

EDIT: Also, I’m assuming ‘x’ is just a placeholder, but just in case, make sure to put real data in your request!