Review Bleeding Env Secrets in Frontend or API Signature

KitaPlatzZentrale / kpz

1 stars 0 forks source link

Review Bleeding Env Secrets in Frontend or API Signature #36

Closed hannogrimm closed 1 year ago

hannogrimm commented 1 year ago

Acceptance criteria:

Written list of all environment variables that are used by the frontend and an OK that there are no concerns raised about their implementation

hannogrimm commented 1 year ago

VITE_BACKEND_URL=http://localhost:3000 OKAY VITE_PUBLIC_HERE_API_KEY=W4Sm0s8ksnXVnfgqHit48vXtf4MvD90-TY_vH0W1Sno OKAY, restricted on Here.com to only answer selected origins

hannogrimm commented 1 year ago

Added a comment to the map as we hardcode the current mapbox public key to later separate into dev/prod env variables. no security concerns here with hardcoding.