skip to Main Content

This is a newbie question. I’m currently working on a twitter clone and added my firebase API endpoint to package.json to use with axios.

"proxy": "https://europe-west1-APPNAME-RANDOMNUMBERS.cloudfunctions.net/api"

Before pushing my code to Github, should I hide the endpoint? If yes, how can I do that? For other types of sensitive data, I have a git-ignored config file but I’m not sure about how to fix this one.

2

Answers


  1. No, they will be able to see this when they use your website.

    Login or Signup to reply.
  2. Is it safe to expose Firebase apiKey to the public?

    This should answer your question 🙂

    The Key ist just an Identifier for the App, not the User of the App himself.

    Login or Signup to reply.
Please signup or login to give your own answer.
Back To Top
Search