AOSSIE-Org / Resonate

Clubhouse, but Open Source. A social voice platform.
GNU General Public License v3.0
171 stars 123 forks source link

The Api Keys and Database Credentials are clearly visible #273

Open shuence opened 4 months ago

shuence commented 4 months ago

🐛 Describe the bug

I navigate through the project today, Pretty easy to setup. But when overlooking the project realised that the api keys and database credentials are easily accessible which is kind of risky and potentially the project could be in risk because of it.

I would be interested if can have .env file which has all the api credentials and if someone really want we can have a drive link of the real api credentials which can be given access when someone requests it. Also the other way someone can create own firebase and appwrite project and do all the testing in their own environment.