How to handle API Keys
Nobody has claimed this yet.
Assessment
- Difficulty
- 5/5
- Estimated time
- Over a week
- Newbie friendliness
- 25/100
- Issue type
- Documentation
- Clarity
- Needs clarification
- Activity status
- Stale
- Tech stack
- javascript, nodejs
- Domain
- authentication, security
Research direction
Start with the issue's question about exposing a Cloudinary API key while keeping the secret protected. Establish the project's intended guidance for returning and using the key, then document a clear, security-reviewed answer; the payload names no files or tests to run.
Written by the indexing model from the issue text.
Description
Is it safe to disclose my API Key (not the secret) to the users of my app? For example returning it in the body of a response to later use it to upload signed files?
- Dominant language
- JavaScript
- Stars
- 672
- Forks
- 318
- PR merge metrics
- No merged PRs in 30d
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from cloudinary/cloudinary_npm
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
cloudinary/cloudinary_npm#746 · 1 comment ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
cloudinary/cloudinary_npm#739 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 58/100
cloudinary/cloudinary_npm#734 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
cloudinary/cloudinary_npm#712 · 1 comment ·
-
Difficulty 3/5 1-2 days Newbie friendliness 42/100
cloudinary/cloudinary_npm#702 · 2 comments ·
All issues in cloudinary/cloudinary_npm
Similar issues
-
Difficulty 1/5 Under an hour Newbie friendliness 88/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
Maintainers usually reply within 1 day
-
discovery:other factory-active task-identify-harness-labels-done task-identify-issue-type-done
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
vercel/ai#25068 · 4 comments ·
Maintainers usually reply within 1 day
-
needs-triage typo
Difficulty 1/5 Under an hour Newbie friendliness 88/100
llm-d-incubation/llm-d-scaling-manager#122 ·
Maintainers usually reply within 1 day
-
create-strapi-app doesn't await writing license.txt, so a failed write skips its error handlingOpenflag: invalid template issue: bug severity: low source: cli status: pending reproduction version: 5
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
strapi/strapi#28637 · 1 comment ·
Maintainers usually reply within 2 days