api-key

Architecture of API Key Implementation

我只是一个虾纸丫 提交于 2019-12-06 10:15:42
问题 I might me wrong, as I am very new to API Key fundamentals. Please correct me if I am wrong. I have a JavaScript front-end, and a backend application in PHP (can be any technology). I want to expose some API from the backend application for AJAX. So that a third party developer could use my API from their application without worrying about the actual implementation on backend. I will expose an API Key to the developer, so that whatever request he makes from his application, uses the API key

Android - Youtube API V3 search not working

蹲街弑〆低调 提交于 2019-12-06 07:55:12
问题 I'm having tough time integrating youtube v3 API. I tried all the possible solutions given in Youtube API Key. Here is my code: YouTube.Search.List query; query = youTube.search().list("id, snippet"); query.setKey(YOUR_API_KEY); query.setMaxResults(5L); query.setChannelId(channelId); query.setOrder("date"); SearchListResponse response = query.execute(); List<SearchResult> results = response.getItems(); As per Ayman Al-Absi 's answer, I also tried passing packageName and and generated SHA1

API key invalid or not approved by Google

瘦欲@ 提交于 2019-12-05 22:27:06
I'm currently upgrading one of my websites from the old system to HTML5 and I have some problems with the Google Maps JavaScript API v3. To fetch data from their API, you must have an key - of course - but it's here I have the problem. The problem is that even if I have an correct key that I have added on their Google APIs Console I'm getting "Permission Denied" all the time, followed by an alert window that say that I don't have an real API key or it's not approved to Google Maps JavaScript API v3. I have turned on "Google Maps API v3" in "Services" on Google APIs Console and payed the "bill"

API keys and secrets used in iOS app - where to store them?

自作多情 提交于 2019-12-05 03:29:34
问题 I'm developing for iOS and I need to make requests to certain APIs using an API key and a secret. However, I wouldn't like for it to be exposed in my source code and have the secret compromised when I push to my repository. What is the best practice for this case? Write it in a separate file which I'll include in .gitignore? Thanks 回答1: Write it in a separate file which I'll include in .gitignore? No, don't write it ever. That means: you don't write that secret within your repo (no need to

Should API Secrets Be Hashed?

♀尐吖头ヾ 提交于 2019-12-05 02:30:26
It might sound like a silly question, because passwords of course need to be hashed and never store the original. However, for API secrets, generally I see them displayed in the clear when signing up for them. For example, if I go to the google api console and look at my credentials page, I can view my client secret, same for twitter. Surely api keys are just as sensitive as passwords? Is it just because from the provider side, you can be confident that a sufficiently strong password is being generated? If that's the case, then that doesn't provide any protection is your database is

Stripe: Validating Publishable and Secret API Keys

流过昼夜 提交于 2019-12-05 01:44:17
I'm builiding a web application that allows our users to sell tickets for music shows. In order to handle the payments between ticket buyers and show instigators, I use Stripe. Basically, the show instigator creates his show's page on my application, and the users can buy tickets for this show. In order to create a show, the instigator fills in a form (Show's name, show's date, where the show will take place, what bands will be playing, etc.) This form also requires the show instigator to provide both his Publishable and Secret Stripe keys. My app uses both these tokens to retrieve credit cart

Architecture of API Key Implementation

你离开我真会死。 提交于 2019-12-04 17:06:31
I might me wrong, as I am very new to API Key fundamentals. Please correct me if I am wrong. I have a JavaScript front-end, and a backend application in PHP (can be any technology). I want to expose some API from the backend application for AJAX. So that a third party developer could use my API from their application without worrying about the actual implementation on backend. I will expose an API Key to the developer, so that whatever request he makes from his application, uses the API key and I can keep a record of which API key is accessing the application. As it is an AJAX call to the

How to hide the API key in my Electron application?

假装没事ソ 提交于 2019-12-04 13:38:15
问题 I'm building an Electron application that uses Google's YouTube Data API v3. For accessing the API, I decided to use the standard API key (instead of OAuth, since I am not going to be accessing any personal data). But the problem is, I cannot hide the API key in my app, and I also cannot use referrer restrictions (referrer restrictions allow you to filter which web sites can use your API key (by HTTP address)), since this is an Electron app. So basically, if someone looks at the source code

When is a Google Maps API key required?

筅森魡賤 提交于 2019-12-04 11:49:28
问题 Recently Google changed it's policy on the use API keys. You're now supposed to no longer need an API key to place Google Maps on your website. And this worked perfectly. But now I have this map (without API key) running on my localhost, which works fine. But as soon as I place it online, I get a popup saying that I need another API key. And on another page on that website, Google Maps does work. Could it maybe have something to do with that the map that doesn't work have a lot (30+) of

Adding an .env file to React Project

社会主义新天地 提交于 2019-12-04 07:50:12
问题 I'm trying to hide my API Key for when I commit to github, and I've looked through the forum for guidance, especially the following post: How do I hide API key in create-react-app? I made the changes and restarted yarn. I'm not sure what I'm doing wrong––I added an .env file to the root of my project (I named it process.env ) and in the file I just put REACT_APP_API_KEY = 'my-secret-api-key' . I'm thinking it might be the way I'm adding the key to my fetch in App.js, and I've tried multiple