Back

[SOLVED] Backend access security

  • 0
  • Flutter
Binyamin
19 Apr, 2023, 23:17

Yes

TL;DR
The user has a question regarding backend access security and storing sensitive information. They are unsure about what details to store and how to store them safely. The community advises not to store API keys on the client side, but rather on the server side. They recommend using Appwrite initialization and storing the endpoint and projectId, as those are considered safe. The issue is marked as [SOLVED].
Binyamin
19 Apr, 2023, 23:18

And sure you can give details on what info so I'll be 100% sure

safwan
19 Apr, 2023, 23:22

What secret keys are you using in the client-side? If you're talking about the endpoint and projectId, then yes it's safe to store.

dammy
14 May, 2023, 20:52

Appwrite initialization.

That holds the key and url

Wanted knowing if it's safe from reverse engineering or cracking

Drake
15 May, 2023, 18:51

What "key" are you talking about? If you're referring to the Appwrite API Key (https://appwrite.io/docs/keys), that is NOT safe to put in your flutter app.

dammy
28 May, 2023, 18:30

the details provided by appwrite when a project is created.

how do one safely store that in flutter app

this was what I meant ☝️

ski
28 May, 2023, 18:32

I think you mean the your appwrite project endpoint and project id

dammy
28 May, 2023, 18:58

Yes @ski

dammy
28 May, 2023, 19:04

Though @safwan said it's safe at main.dart

dammy
28 May, 2023, 19:05

I appreciate you all

@safwan @ski @Steven

safwan
28 May, 2023, 19:05

i meant for the server side. when you're creating an appwrite function 😅

dammy
28 May, 2023, 19:05

please rephrase

safwan
28 May, 2023, 19:06

the project id and endpoint are fine. api keys should never be stored on the client side.

safwan
28 May, 2023, 19:06

^

dammy
28 May, 2023, 19:06

ok, I will store them on appwrite

safwan
31 May, 2023, 06:28

[SOLVED] Backend access security

D5
31 May, 2023, 08:58

Not even in appwrite, no one should have access to it except of you

dammy
2 Jun, 2023, 16:19

So how do I store it @D5 ?

Drake
2 Jun, 2023, 17:12

what exactly are you trying to store and what are you trying to do with it?

D5
2 Jun, 2023, 18:07

Locally in the user device

dammy
3 Jun, 2023, 16:01

@Steven appwrite endpoint and secret details, for access to appwrite backend

Drake
3 Jun, 2023, 16:01

I don't know what you mean by secret details

Drake
3 Jun, 2023, 16:02

As mentioned before, the endpoint is not sensitive and can be shared

dammy
3 Jun, 2023, 16:17

ok

Reply

Reply to this thread by joining our Discord

Reply on Discord

Need support?

Join our Discord

Get community support by joining our Discord server.

Join Discord

Get premium support

Join Appwrite Pro and get email support from our team.

Learn more