Don't save API key in settings.json

wakatime / vscode-wakatime

Visual Studio Code plugin for automatic time tracking and metrics generated from your programming activity.

https://wakatime.com/vs-code

BSD 3-Clause "New" or "Revised" License

1.23k stars 137 forks source link

Don't save API key in settings.json #395

Closed Laurensdc closed 2 months ago

Laurensdc commented 2 months ago

Setting.json is automatically synced by VSCode. Furthermore, when using a dotfile version control system, it can get pushed to public repositories. We need a way to have the API key not being exposed in plain text in the settings.json file.

alanhamlett commented 2 months ago

We don't save your api key to settings.json, it's saved to your user home folder at ~/.wakatime.cfg.

Laurensdc commented 2 months ago

Ok I have no idea how my API key appeared in settings.json then, but thank you! Verified that Wakatime still works when I delete the API key from settings, and re-setting it doesn't add it to settings.json.