As stated before use app id instead of service id when generating the client_secret.