django-rest-framework-social-oauth2 & Client secret

Hi, I am working on setting up django-rest-framework-social-oauth2 and I am able to get the tests in the official README to run. However, the few examples in the docs require the Client Secret in the URL. As I don't want to publish the Client Secret in an SPA, I am wondering if there is another way

Documenting error codes properly in the generated openapi schema?

Hi, We're using the automatic schema generation to produce our openapi documentation of our API. However, currently the responses just list the success case responses, 200/201. What should I be doing so that we also have the 403 or other error case responses documented when authentication or