Hardcoded API Keys in Production Code
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
Start in app/lib/app_config.dart at lines 95-98, 125-128, and 195-198, and review how configuration is supplied for production, staging, and testing. Replace the hardcoded FlagSmith keys with the chosen secure configuration approach, then verify that each environment still receives its key without exposing credentials in source.
Written by the indexing model from the issue text.
Description
Location: app/lib/app_config.dart (lines 95-98, 125-128, 195-198)
Issue: API keys for FlagSmith are hardcoded in source code for all environments:
'apiKey': 'BuzktmbcnMJ77vznU7WhJB' // Production
'apiKey': 'n6YyxDdrePqwAF49KCYx7S' // Staging
'apiKey': 'VtTsMwJwiF69QWFWHGEMKM' // Testing
Risk: Exposed API keys could lead to unauthorized access to feature flags and potential abuse.
Fix: Move to environment variables or secure key management.
- Dominant language
- Dart
- Stars
- 9
- Forks
- 5
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from threefoldtech/grid_connect
-
Difficulty 4/5 3-5 days Newbie friendliness 32/100
threefoldtech/grid_connect#1246 · 1 comment ·
-
TF Connect Wallet section Remains Accessible Without Password After Screen Unlock – Security Issue Open
Difficulty 4/5 3-5 days Newbie friendliness 48/100
threefoldtech/grid_connect#1227 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 38/100
threefoldtech/grid_connect#1213 ·
-
threefoldtech/grid_connect#1197 · 1 assignee ·
-
threefoldtech/grid_connect#1193 · 1 assignee ·
All issues in threefoldtech/grid_connect
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 64/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
-
bus
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 1/5 Under an hour Newbie friendliness 78/100