home
products
contribute
download
documentation
forum
Home
Forums
New posts
Search forums
What's new
New posts
All posts
Latest activity
Members
Registered members
Current visitors
Donate
Log in
Register
What's new
Search
Search
Search titles only
By:
New posts
Search forums
Search titles only
By:
Menu
Log in
Register
Navigation
Install the app
Install
More options
Contact us
Close Menu
Forums
MediaPortal 1
Development
General Development (no feature request here!)
Hiding application id/secret
Contact us
RSS
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Reply to thread
Message
<blockquote data-quote="doskabouter" data-source="post: 1214256" data-attributes="member: 98267"><p>Hi,</p><p></p><p>I'm searching for a while now for best practices on using api calls which require an application id and a secret.</p><p>If I set it directly in my source then it's publicly available to anyone once I push my code to github, and judging from the terms that's not really acceptable.</p><p>I can add some obfuscation to it, but in the end it's decryptable by someone simply by debugging the code, and or use a sniffer.</p><p>Alternatively I could let users get an application id themselves, but that is bad for the userexperience.</p><p></p><p>The api is the one from vimeo (for onlinevideos), but i can imagine that f.e. youtube and or others have the same problem.</p><p></p><p>Anyone any insights on this?</p><p>tagging [USER=73415]@offbyone[/USER] to see what his considerations were when developing the youtube part</p></blockquote><p></p>
[QUOTE="doskabouter, post: 1214256, member: 98267"] Hi, I'm searching for a while now for best practices on using api calls which require an application id and a secret. If I set it directly in my source then it's publicly available to anyone once I push my code to github, and judging from the terms that's not really acceptable. I can add some obfuscation to it, but in the end it's decryptable by someone simply by debugging the code, and or use a sniffer. Alternatively I could let users get an application id themselves, but that is bad for the userexperience. The api is the one from vimeo (for onlinevideos), but i can imagine that f.e. youtube and or others have the same problem. Anyone any insights on this? tagging [USER=73415]@offbyone[/USER] to see what his considerations were when developing the youtube part [/QUOTE]
Insert quotes…
Verification
Post reply
Forums
MediaPortal 1
Development
General Development (no feature request here!)
Hiding application id/secret
Contact us
RSS
Top
Bottom