elementary / elementary/appcenter-dashboard

Allow UI to inject api keys to the build.

Open
#20 5 comments 0 reactions 0 assignees View on GitHub
Dominant language
Elixir
Stars
14
Forks
5
Avg merge
23h 19m
Merged PRs (30d)
1

Description

I am using sentry.io for crash reporting in my hybrid app.But since the app is also opensource i need to hide my keys from the code.
As a workaround, i have resorted to adding the config.js file in .gitinore, but this is not an ideal solution because I have to build the binary beforehand and commit it with the code. @danrabbit has pointed out that there are security issues with this approach ( verifying code is hard ).

This allows me to build hybrid apps with vala and nodejs
https://github.com/harisvsulaiman/pushy/issues/13

---
Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/49180566-allow-ui-to-inject-api-keys-to-the-build?utm_campaign=plugin&utm_content=tracker%2F27692469&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F27692469&utm_medium=issues&utm_source=github).

Contributor guide

Open the contributing guide

Research direction

Start by reviewing the repository's build and configuration entry points, then compare the requested behavior with the referenced pushy issue and the existing config.js workaround. Define how the UI would supply API keys without committing them and how a build can verify the resulting binary; the issue is done when that flow is specified and tested.

Written by the indexing model from the issue text.

Assessment

Tech stack
elixir, nodejs
Domain
build-system, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.