// Public browser client: this identifier is not a client secret.
db.getSiblingDB("sxchnge").clients.updateOne(
  {clientId: "sxchnge-local-web"},
  {$setOnInsert: {
    clientName: "Local browser", allowedCIDRs: ["0.0.0.0/0", "::/0"],
    allowedScopes: ["account"], redirectURIs: ["https://localhost:5126"],
    grantTypes: ["password", "refresh_token"], tokenEndpointAuthMethod: "none", isRevoked: false
  }}, {upsert: true}
);