Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Put sensitive data (appid/appsecret) on config file, and add it to .gitignore

See original GitHub issue

I’m using the Node.js Bot Builder Framework. As I think loots of people are going to keep bots public at github, it would be great if sensitive data (as appId and appSecret) was storage at a config file. For safety, this file could come added at .gitignore. In my case I have created /.bot/secrets.json to storage sensitive information. If I don’t have the file, my server just use some default strings like: YOUR_APP_ID and YOUR_APP_SECRET. I’m not sure if I did it in the best way. I accept suggestions.

Issue Analytics

State:
Created 7 years ago
Comments:7 (2 by maintainers)

Top GitHub Comments

1reaction

jieversoncommented, Apr 12, 2016

In C#, I’m pretty sure you can just configure variables at your azure app settings. For localhost test, just add environment variables to windows (from control panel, or start menu search).

0reactions

ghostcommented, Apr 12, 2016

Thanks. I’ll try it out.

Top Results From Across the Web

Put sensitive data (appid/appsecret) on config file, and add it ...

I'm using the Node.js Bot Builder Framework. As I think loots of people are going to keep bots public at github, it would...

How To Create A .gitignore File To Hide Your API Keys

I am going to use an example of how to configure a .gitignore file when you are working with an API (Application Programming...

Keeping secrets out of source control - are we just moving the ...

A good rule of thumb to follow when designing a system where confidential data must be protected is to always put controls in...

Hiding Secret Keys in Create-React-App - Pluralsight

To make this practical, you'll set up an app that makes an API call to Newsapi.org and secure the keys obtained from the...

Configure secrets for the GitLab chart

For configuring OAuth integration of various services like GitLab Pages and Grafana with GitLab, secrets containing OAuth credentials are required. The secret ...