diff --git a/object/token.go b/object/token.go
index cf761253..c9dc6396 100644
--- a/object/token.go
+++ b/object/token.go
@@ -149,6 +149,8 @@ func CheckOAuthLogin(clientId string, responseType string, redirectUri string, s
 		return "redirect_uri doesn't exist in the allowed Redirect URL list", application
 	}
 
+	// Mask application for /api/get-app-login
+	application.ClientSecret = ""
 	return "", application
 }