elementary / elementary/appcenter-dashboard
Allow UI to inject api keys to the build.
- Dominant language
- Elixir
- Stars
- 14
- Forks
- 5
- Avg merge
- 23h 19m
- Merged PRs (30d)
- 1
Description
I am using sentry.io for crash reporting in my hybrid app.But since the app is also opensource i need to hide my keys from the code.
As a workaround, i have resorted to adding the config.js file in .gitinore, but this is not an ideal solution because I have to build the binary beforehand and commit it with the code. @danrabbit has pointed out that there are security issues with this approach ( verifying code is hard ).
This allows me to build hybrid apps with vala and nodejs
https://github.com/harisvsulaiman/pushy/issues/13
---
Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/49180566-allow-ui-to-inject-api-keys-to-the-build?utm_campaign=plugin&utm_content=tracker%2F27692469&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F27692469&utm_medium=issues&utm_source=github).
Contributor guide
Research direction
Start by reviewing the repository's build and configuration entry points, then compare the requested behavior with the referenced pushy issue and the existing config.js workaround. Define how the UI would supply API keys without committing them and how a build can verify the resulting binary; the issue is done when that flow is specified and tested.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- elixir, nodejs
- Domain
- build-system, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100