Qwiddle / moovie

0 stars 0 forks source link

API key is exposed to the public #1

Open Qwiddle opened 2 years ago

Qwiddle commented 2 years ago

Expected Behavior

Ideally the API key should not be exposed to the public to prevent any potential abuse.

Current Behavior

The API key is visible in plaintext in the webpack build and can be easily pulled by monitoring outgoing network requests.

Possible Solution

Have the client communicate with a Moovie API and handle all requests to TMDB's api through the server.

Steps to Reproduce

N/A

Detailed Description

N/A

Possible Implementation

N/A