Hacker News new | ask | show | jobs
by lucavice 62 days ago
If it's called from Javascript in the browser, it's not a secret API key....
2 comments
shakna 62 days ago
Which is why Google calls it a public API key...
link
littlecranky67 62 days ago
there are plenty of API keys distributed like this by design. For example, google maps requires this, else your (anonymous) users can't use an embedded google map on your website. And a public firebase app needs some kind of API key, too.
link