The bot that has everything! - Leveling • Music • Memes • Moderation • nsfw • Logging • Tickets • Reaction Roles • Fun • Anime • Applications • Much More
Client secrets and API tokens in botconfig/config.json appear to be real
Additional context, text and screenshots!
I was browsing around repos and stumbled upon this and while reading I noticed that your botconfig/config.json includes what appear to be real API keys, client secrets, and IDs. Examples include:
A Google API key (AIza...) under ksoft_api.
A Spotify clientSecret and clientID.
Potential API keys for Fortnite and Memer APIs.
Now I read the README and I doubt that this is intentional but I'm bringing this up so that some web scraper doesn't steal a potentially real token
If this was intentional, my apologies for wasting your time.
Stay safe 👍
What's your nodejs Version.
N/A
What's the version you downloaded the bot?
Release 4
Desktop (please complete the following information):
Describe the bug
Client secrets and API tokens in botconfig/config.json appear to be real
Additional context, text and screenshots!
I was browsing around repos and stumbled upon this and while reading I noticed that your
botconfig/config.jsonincludes what appear to be real API keys, client secrets, and IDs. Examples include:AIza...) underksoft_api.clientSecretandclientID.Now I read the README and I doubt that this is intentional but I'm bringing this up so that some web scraper doesn't steal a potentially real token
If this was intentional, my apologies for wasting your time.
Stay safe 👍
What's your nodejs Version.
What's the version you downloaded the bot?
Desktop (please complete the following information):
To Reproduce
Expected behavior