Hacker News new | ask | show | jobs
by FLUX-YOU 3642 days ago

    $.ajax({
        ...
           key: "private-live-6w9c2p10G5p3b6y",
        ...
    });
I haven't signed up, but if this is going in an ajax request, how do you prevent people from getting your key? Is this specifically meant for node where you can guard such things?
1 comments

I just changed that to take the public key, thanks!. Users get a private and public key, the private key will work in all areas but should never be exposed. The public key can be exposed and in the dashboard you can white list the allowed origins.