DEV Community

Discussion on: How to 'Not Advertise' Your API Key in React Apps

Collapse
 
mary_white profile image
Mary White • Edited

I have been using a middleware tool to secure my API Keys then placing the public URL that's created into my code. This seems to be a 2 birds with one stone kind of situation, as my API secrets are not exposed in my repo nor on my frontend. I find this KOR connect tool to work really well for my projects where I need to secure a private API Key, don't want user authentication, and want to get it done quickly. They claim to also prevent bot attacks and prevent non origin calls. It's also free, which is a bonus. Here is a blog I found this weekend and followed: dev.to/korconnect/secure-api-keys-...

I have found this to help me out a lot lately so I am putting it up an old blog post, in the hopes that it might help others looking in the future.

Happy coding!