Back
Appwrite sdk data security
Is it secure to put the sdk requirement data in the codebase?
If yes, how Appwrite securing my app from unauthorized source
- example: connection to my project from source that’s not my app
TL;DR
Developers are discussing the security of including Appwrite SDK data in the codebase. As long as permissions are set properly and an API key isn't exposed, it should be fine. App constants can be put in the codebase. Appwrite secures the app by authenticating connections.To clarify it; I’m talking about app constants
What do you mean?
Yes, people can write if they build a different app
i'm talking about:
TypeScript
export const config = {
endpoint: 'https://cloud.appwrite.io/v1',
projectId: 'xxxx',
platform: 'com.occode.xx',
databaseId: 'xx',
storageId: 'xx',
usersCollectionId: 'xx'
}
const client = new Client()
client
.setProject(config.projectId)
.setPlatform(config.platform)
.setEndpoint(config.endpoint)
is it secure to implement this data in the codebase?
I hope anyone can help me
As long as you don't set an API key and you have permissions set properly, I think it should be fine
