The discovery URL is https://YOUR_AUTH0_DOMAIN/.well-known/openid-configuration
(you’ll need to replace your with your real Auth0 domain).
The client id and client secrets are indeed the values from the application you created in Auth0. Treat the client secret as a sensitive value (don’t expose it).