Step 2 Fixed: Session Token → Public Certificate → RSA Encryption
Security: Client secret is not stored. Access token and public key are masked on screen. Use only dummy data on this page.