afhaque / PassportExamples

A few examples of passport authentication with various strategies (Facebook, GitHub, Twitter, etc.)
10 stars 2 forks source link

Exposed Private API Key #1

Open iok198 opened 7 years ago

iok198 commented 7 years ago

Hello, something you might not have realized was that you gave your private api key to literally anyone that views this repository. This could be really harmful for not only the application, but for your entire account.

What I recommend you do is that make a new commit, removing the private api key, and then delete the rest of your commits to make sure no one can access this.

If you want more information, you could reply to this message.

MuriloRibas commented 5 years ago

You can create an .env file and add this to the .gitignore, to not expose your private infos