question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

don't put key auth data in public config.js

See original GitHub issue

I think having config.js is a good idea, & should stay part of the git repo (eg not in .gitignore.

But correct me if I’m wrong, isn’t the social login id & secret private information? So should they be in a separate file (eg secrets.js) & that file be added to .gitignore so people don’t accidentally upload their secretes?

Issue Analytics

  • State:closed
  • Created 7 years ago
  • Reactions:1
  • Comments:7 (2 by maintainers)

github_iconTop GitHub Comments

1reaction
langpavelcommented, Apr 27, 2016

Even better in environment variables or passed as command line arguments

0reactions
ulanicommented, May 27, 2021

@tomByrer thank you very much for crating this issue! Unfortunately, we have close it due to inactivity. Feel free to re-open it or join our Discord channel for discussion.

NOTE: The main branch has been updated with React Starter Kit v2, using JAM-style architecture.

Read more comments on GitHub >

github_iconTop Results From Across the Web

How do I hide API key in create-react-app? - Stack Overflow
To check that you can access your API key, go to your App.js file and add a console.log at the top below the...
Read more >
Set up SSH public key authentication to connect to a remote ...
Set up public key authentication using SSH on a Linux or macOS computer · On the SSH command line: Add the -i flag...
Read more >
Protecting your API keys with Next JS - DEV Community ‍ ‍
There is not a good (or any) way to protect your keys in the frontend. One good alternative is to create a proxy...
Read more >
Hiding Secret Keys in Create-React-App - Pluralsight
The create-react-app documentation states that clearly. WARNING: Do not store any secrets (such as private API keys) in your React app!
Read more >
How to Troubleshoot SSH Authentication Issues
Check that key-based authentication is allowed by the server. Make sure the private key is readable by the SSH client. If you're using...
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found