ad3109 / CAT

4 stars 2 forks source link

api-key exposed in contract #4

Open ad3109 opened 1 year ago

ad3109 commented 1 year ago

In current iteration, the api-key for requesting the commodities is completely exposed in the contract. If this is the link of a paid subscription, anyone could copy it out of the contract and start using it for themselves.

So, we need to find out how one can obfuscate this / encrypt it.