Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

You should not upload app secret #137

Open
0x5bfa opened this issue Jan 4, 2022 · 0 comments
Open

You should not upload app secret #137

0x5bfa opened this issue Jan 4, 2022 · 0 comments

Comments

@0x5bfa
Copy link

0x5bfa commented Jan 4, 2022

Desctiption

You, owner @aalok05 , has uploaded your app key and app secret.
Most open source apps that use app secret add this to .gitignore(or dont stage this) and encourage users who cloned the repo including this to add it themselves like this app (youtube api) or this app (github api).

Current behavior and expected behavior

Uploading app secret may cause unauthorized use. so disable this app secret(or regenerate one) and add app.config to .gitignore.

@0x5bfa 0x5bfa changed the title You must not upload app secret You should not upload app secret Jan 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant