Is it safe to include keys/secrets in my client-side JavaScript app? : Progress Kinvey

Redirect Notice

As of April 12th, you must go to Progress SupportLink to create new support cases or to access existing cases. Please, bookmark the SupportLink URL and use the new portal to contact the support team.

How can we help you today?

Start a new topic

Is it safe to include keys/secrets in my client-side JavaScript app?

Ivan Stoyanov

started a topic almost 10 years ago

Wouldn't anyone be able to inspect the JavaScript, retrieve the secrets and gain access to my backend?

2 Comments

Justin Noel

said almost 10 years ago

Here's another stab at this same answer : http://calendee.com/are-baas-providers-secure/

Ivan Stoyanov

said almost 10 years ago

It is safe to include the app secret in client-side code (the same question is valid for native apps). The app secret has minimal privileges and uncovering it does not pose a risk to your data in any way.

For more information, see http://devcenter.kinvey.com/guides/security