atsign-foundation / at_wavi_app

Create weblets with Wavi, the fast, simple microsite maker that allows you to instantly publish content like blogs, portfolios, code samples, and more…
https://atsign.com/apps/wavi/
BSD 3-Clause "New" or "Revised" License
10 stars 20 forks source link

Use `ENVied` package or `--dart-define` argument #268

Open yahu1031 opened 3 months ago

yahu1031 commented 3 months ago

Is your feature request related to a problem? Please describe.

Using .env files should be included in app while building. But when we decompile apps, we may get the data from the built apk. This may lead to data-breach/app compromise.

Describe the solution you'd like

Using envied may help in sorting this issue. The env data will get encoded/obfuscated during build time.

Describe alternatives you've considered

Using --dart-define/--dart-define-from-file also works.

Additional context

This is the current result of using env.

Screenshot 2024-07-22 at 1 19 58 AM

Please don't encourage using .env files for practices too.

yahu1031 commented 3 months ago

CC: @tinashe404 @XavierChanth @TylerTrott @JeremyTubongbanua