client_id must be provided