security - How to obscure sensitive data written in Javascript? -

-

i have developed web application makes use of google sign-in within angularjs application.

since client_id , api_key written in javascript think it's quite easy find them out browser's dev console.

apparently it's possible "obscure" js code (e.g. how can obfuscate (protect) javascript? ), concern is: make impossible potential attacker access keys?

if not, what's best practice in case? i've heard of kind of backend obscure keys written in js. kind of "gateway"

just mention, concerns not google apis code write not "open source" unless decide so

edit: since i'm not sure doubt completley clear, here actual question

what methodology can use prevent users "stealing" keys? there exist service serves gateway? shall design 1 on own?

does make impossible potential attacker access keys

you can compress and/or obfuscate process always reversable long application requires plain keys.

all code write not "open source" unless decide so

with choosing javascript language , browser platform already decided go open source.

you obtain copyright code, you're left putting in proper license header , knowledge companies make money wouldnt dare "just rip" code. people interested in how accomplished would'nt go through hassle of reversing compression and/or obfuscation.

edit: non public api keys bound specified referrer domain.

to prevent key being used on unauthorized sites, allow referrals domains administer.


Comments

Post a Comment

Popular posts from this blog

google chrome - Developer tools - How to inspect the elements which are added momentarily (by JQuery)? -

-
i looking @ how website designed using inspector in chrome. can use firefox developer tools or firefox web developer add-on or chrome web developer extension. so website has slide-show , using jquery it. looking @ markup , css in inspector, i see 2 things constantly changing slides change: one opacity css property understandable, i'd see changing values, changes fast see read anything. second- a div added in div slides change momentarily , moment when appears short notice except div . so question is there way stop slideshow can temporarily rid of blinking sort of effect (by speedy adding , removal , changing of elements , values)? where can inspect div element gets added such short moment , , gets removed? , can see changes in value of opacity takes place? is there way stop slideshow can temporarily rid of blinking sort of effect (by speedy adding , removal , changing of elements , values)? if opacity animated css transition or animation,
Read more

angularjs - Showing an empty as first option in select tag -

-
my app showing empty select field first entry. have read other solution given , tried still not working. my controller code is: .controller('usercreatecontroller', function(user,profile,auth) { alert("hello"); var vm = this; vm.type = 'create'; profile.all() //this service fetch profiles shown in select field .success(function(data){ vm.profile = data; }); vm.userdata.profile = vm.profile[0]; //here have set default value select field and html page is: <label class="col-sm-2 control-label">profile</label> <div class="col-sm-8"> <select ng-model="user.userdata.profile" ng-options="person._id person.profilename person in user.profile"> </select> </div> hierarchy of vm.profile { "_id": 46, "profile": objectid("5516498e95b84548156db754"), "isactive": true, "password": "$2
Read more

php - Cloud9 cloud IDE and CakePHP -

-
i attempting cakephp running on cloud9, cloud based ide. unaware, cloud collaboration ide intermixes services such bitbucket. site gives sudo rights, , installed cakephp using these instructions: https://www.digitalocean.com/community/tutorials/how-to-install-cakephp-on-an-ubuntu-12-04-vps when attempt run database exported machine cakephp installed, error message "url rewriting not configured on server." attempted solve issue using official guide cakephp: http://book.cakephp.org/2.0/en/installation/url-rewriting.html but no cigar, same error message. has gotten cakephp working, or aware of cloud ide free/low cost cloud9 support cakephp? here's how got working now: sudo apt-get update sudo apt-get install php5-intl curl -ss https://getcomposer.org/installer | php -- --filename=composer ./composer create-project --prefer-dist cakephp/app this creates project in /app default. move workspace docroot: mv app/* ./ mv app/.* ./ rm -rf app then de
Read more