API Key exposed?

Open ninjasort opened this issue 3 years ago • 2 comments

I'm not sure this is a good idea to drop in the entire Firebase credentials directly in the options.

I would prefer if you could expose the initializeApp function so we can configure that and return the app instance on our own.

All I really want is to have a wrapper around the Gatsby pages and some useful Firebase components to fetch and render data.

Dec 25 '22 13:12 ninjasort

Use env variables to hide your API keys/secrets.

Dec 25 '22 14:12 VlatkovicB

Sure, what are the Gatsby best practices for plugin security. I'm curious to read more into this.

Dec 31 '22 15:12 ninjasort