search

mtr-cherish / cherish

http://cherish.meteor.com
MIT License
24 stars 3 forks source link

Remove settings file from Cherish - look for a pattern to use settings from within the application #125

Open jeffshaver opened 9 years ago

jeffshaver commented 9 years ago

Needs to be secure, but accessible from both client/server. Stuff like Initiative limit should be there, whether to run in debug or production mode (for mocking data).

We should only be using settings.json for service credential stuff, like Facebook App Id, secrets, AWS, etc.

jeffshaver commented 9 years ago

How is Meteor.settings not secure? The only thing that is exposed to the client is anything inside the public key. Everything else is only available on the server?