ConnectyCube / connectycube-reactnative-samples

Chat and Video Chat code samples for React Native, ConnectyCube
https://connectycube.com
Apache License 2.0
124 stars 111 forks source link

Security Concern - API keys and Secret #193

Closed stephanoparaskeva closed 2 years ago

stephanoparaskeva commented 3 years ago

These keys are stored on the front end. So every client has access to the secret and keys, meaning they can use the API E.g:


{
    appId: 385,
    authKey: 'DFBMs5-dKBBCXcd',
    authSecret: 'SkCW -ThdnmRg9Za',
}

How can one do this and configure without the client ever knowing the AppID,authKey, authSecret or API keys?

ccvlad commented 3 years ago

This way can be useful - https://github.com/ConnectyCube/connectycube-js-sdk-releases/issues/64#issuecomment-753909198

ccvlad commented 2 years ago

Closed due to inactivity. Please create a new issue if needed.