WebRTC Security Issue

I am looking at the tutorial on github at url https://github.com/ringcentral-tutorials/getting-started-with-webrtc-js-demo I would like to implement this, however the problem I have is that it requires the app's client id and secret to be passed to javascript to be able to use. How do I make it so it runs on a TOKEN that I get from some backend API and not expose my app's sensitive data.