Fetch data from Airtable *securely*

[Weihua4455]

For this project, we compiled a list of ARPA spendings in Airtable, which will feed into a story component will readers can shuffle through them.

The first thing I tried is using Makefile + baseGL + cURL request to request the dataset in command line, then moving the file under src/assets/data

It worked, but obviously the data would only update if someone pulls it manually.

Now I'm trying to fetch the data in graphic.js directly, but it exposes our authorization key. I'd love some help and guidance on

1. Should I be alarmed by this?
2. How should we fix this and fetch Airtable data securely?

Not sure who to tag because I feel like everyone but me would know exactly what to do lol, maybe start with @GabeIsman and @eads?

Here's snippet:

function getWTFData() {
  try {
    return fetch("https://api.baseql.com/airtable/graphql/appjNDCHFduMTVuRA", {
      "headers": {
        "accept": "application/json",
        "accept-language": "en-US,en;q=0.9",
        "authorization": "Bearer MTJhNGIzNjgtZmRkZS00MWJiLWIxMjAtYzU4NzVkNDM2YTI5",
        "cache-control": "no-cache",
        "content-type": "application/json",
        "pragma": "no-cache",
      },
      "referrer": "https://app.baseql.com/",
      "referrerPolicy": "strict-origin-when-cross-origin",
      "body": "{\"query\":\"query MyQuery {\\n  requests {\\n    budget\\n    category\\n    description\\n    obligations\\n    place\\n    projectName\\n    state\\n    wtf\\n  }\\n}\\n\",\"variables\":null,\"operationName\":\"MyQuery\"}",
      "method": "POST",
      "mode": "cors",
      // "credentials": "include"
    })
    .then(r => r.json());
  } catch(err) {
    console.log("fetching error while getting data:", err);
  }
}

[eads]

We should just switch to static for publication -- this needs to be dev/preview only. We should not be loading live in production.

You don't actually need those auth tokens, but they'll expire in any case so if we ever open sourced this, we'd be safe.

[Weihua4455]

Ah awesome that made me feel so much better.

I'll leave this one open so I don't forget to switch off to the static version!