APIKey and Security

[Dick Honing]

how can I hide the APIKey from the (web page's) code?

And is there a do's and don'ts list in terms of security when building web sites with AppDrag?

Thanks in advance!

[Joseph Benguira]

Hey Dick, you should NEVER use your APIKey in the frontend side! It's meant to be used only for severside operations.
For client side authentication please check JWT or simple auth with SQL and a token as explained in our tutorials

https://academy.appdrag.com/FullStack-with-cloud-backend-Episode-2.html

[Dick Honing]

@Joseph-Benguira thanks! And one more question; does each project have it's own APIKey?

[Wassim]

@Dick-Honing yes, you can also re-generate it from your Cloud Backend Dashboard if it was exposed