Setting a users openai token as an environment variable is insecure

holoviz-topics / panel-chat-examples

Examples of Chat Bots using Panels chat features: Traditional, LLMs, AI Agents, LangChain, OpenAI etc

MIT License

105 stars 31 forks source link

Closed MarcSkovMadsen closed 10 months ago

MarcSkovMadsen commented 10 months ago

I believe getting a token/ api key from a user and setting it as an environment variable is a bad practice and insecure.

Implementations like the below could quickly lead to one user using the api key of another user.