I am trying to understand oauth protocol. I am currently looking at temporal credentials section of the oauth 1.0 sepecification.
I can't understand why the secret is needed along with the temporal credentials. Secret is sent with the token itself. So if someone other than the app can get the token he can get the secret as well. right? So what is the reason for adding a secret?