Ideal way to store the keys json file?

jopmiddelkamp / dart_google_secret_manager

A Dart library for accessing the Secret Manager API.

BSD 3-Clause "New" or "Revised" License

3 stars 1 forks source link

Ideal way to store the keys json file? #1

Open Wizzel1 opened 1 year ago

Wizzel1 commented 1 year ago

Hi and thanks for your package!

I was wondering what the ideal way is to store the json of the service account. For example: If I add it to the assets folder, wouldn't it be easy to just read the json and use it to get the secrets?

Thanks!

jopmiddelkamp commented 1 year ago

At this moment there is not yet a way to store it securely.. The more I looked into securing this package more the more I had the feeling accessing the secrets manager from your back-end in combination with firebase_app_check would be the most secure. Only the app check package is not working.. So have to create an issue for that.