topic Securing API Keys & API secret in Software Archive

Securing API Keys & API secret

Navin_Kumar_P_ — Sun, 06 Nov 2016 14:09:02 GMT

I am building an app which calls multiple APIs. I have put in the API Key inside the JS files while calling the APIs. If the API Key is reset at the server, how do I dynamically reset the API Key used in the app? Also, is there a way to secure the API secret without putting it on the JS variable?

Thanks

Navin

Kumar -- that's a real issue

PaulF_IntelCorp — Mon, 07 Nov 2016 20:43:09 GMT

Kumar -- that's a real issue that one faces with a Cordova app. I'm sure there are a variety of solutions out there, but we don't have one, in particular, to recommend. I suggest you search Stack Overflow and other resources for something like "how to hide API keys in a Cordova PhoneGap app" for some solutions that others have implemented. The XDK builds a standard Cordova app, so solutions that work with Cordova or PhoneGap should work for the XDK, as well.