api-key

Should API Secrets Be Hashed?

不打扰是莪最后的温柔 提交于 2019-12-12 09:35:25
问题 It might sound like a silly question, because passwords of course need to be hashed and never store the original. However, for API secrets, generally I see them displayed in the clear when signing up for them. For example, if I go to the google api console and look at my credentials page, I can view my client secret, same for twitter. Surely api keys are just as sensitive as passwords? Is it just because from the provider side, you can be confident that a sufficiently strong password is being

Storing API keys on the Realtime Database (Firebase)

不羁岁月 提交于 2019-12-12 03:45:19
问题 My android app requires using the Google Place Search API but since it's not available for android, I'll have to call the Web API. I've considered using Cloud Functions but that's too expensive and can be done for a lot less if done locally on each client. The problem is storing the API key on the user's devices as it can be easily retrieved. Thus is it safe if I store the key on the RT DB and reference it only when needed? Also, if you have suggestions, I'd me more than happy to implement

What APIs and Credentials are really needed for Firebase Analytics?

我是研究僧i 提交于 2019-12-12 03:44:46
问题 After making an app for Firebase Analytics in Firebase Console (as mentioned here: https://firebase.google.com/docs/android/setup) in old developers console (https://console.developers.google.com) for the respective project we get some APIs enabled automatically and some credentials: API keys: Server key (auto created by Google Service) Android key (auto created by Google Service) OAuth 2.0 client IDs: Android client for xxx.xxx.xxx (auto created by Google Service) Web client (auto created by

Can I publicly share my Google+ API keys?

孤街醉人 提交于 2019-12-12 02:25:08
问题 I am developing an application with Google plus. Hence I need an API key. I have generated the key in API console. Now using that key I am going to access some data from Google+ using JavaScript in JSON. But in this method my API key will be publicly visible. Is it OK to share it? Some information I got from here https://developers.google.com/console/help/#UsingKeys 回答1: Having API Keys public for client-side applications can't be avoided. To make sure no other people can (ab)use your API Key

SecurityError: Error #2028: Local-with-filesystem SWF file

你说的曾经没有我的故事 提交于 2019-12-11 16:27:58
问题 I don't know how to tell the flash to let the swf file get connected. I used the crossdomain.xml as well but nothing have changed. here is the xml code: <?xml version="1.0"?> <!DOCTYPE cross-domain-policy SYSTEM "http://www.macromedia.com/xml/dtds/cross-domain-policy.dtd"> <cross-domain-policy> <allow-access-from domain="*" /> </cross-domain-policy> and here is the error on the swf file when i run it from my own computer(this one solved): SecurityError: Error #2028: Local-with-filesystem SWF

Tastypie auto log out

。_饼干妹妹 提交于 2019-12-11 15:13:59
问题 I am creating API based on Django 1.4.3 with Tastypie. I use ApiKey to authenticate users. As default ApiKey cannot be expired. But there is column created with datetime in apikey table. Even when I change it to 2010 year, the key is still valid. My question is how can I make the column created useful and forbid access for keys older than let say 24 hours, in easiest way and does it make sense? At the moment I have no idea how I could even try to achieve that. I don't expect ready solution.

google map authenticate failed, after package name changed

余生长醉 提交于 2019-12-11 11:45:43
问题 I have an android app with a Google map, everything works good. In order to publish it in Google play, I changed the package name (old package com.exmaple..) from project----- Android tools---Rename Application Package So, I going to generate a new API key with my new package name. I changed manifest with the new key. <meta-data android:name="com.google.android.maps.v2.API_KEY" android:value="xxxxxxxxxxxxnew keyxxxxxxxxxxxxx" /> But, it did not work. It said authentication failed. Is there

Getting PERMISSION_DENIED when try to access Google Sheets with API Key

痞子三分冷 提交于 2019-12-11 05:47:37
问题 If I try to get data from Google Sheets with a basic spreadsheets.values.get request like this https://sheets.googleapis.com/v4/spreadsheets/1p7sFt.....gRu9A/values/Sheet!1A1:L7?key=AIza.....oTXg it works. But, if I add more parameters to the request it fails. Ex: https://sheets.googleapis.com/v4/spreadsheets/1p7sFt.....gRu9A/values/Sheet1!A1:L7**?majorDimension=COLUMNS**?key=AIza.....oTXg and returns: { "error": { "code": 403, "message": "The request cannot be identified with a client

API key and discovered Google sheets functions

丶灬走出姿态 提交于 2019-12-11 05:20:02
问题 This question is about authenticating using an API key when using Python to write to a Google sheet. Following the Getting Started example, I'm "discovering" the API using an URL: service = discovery.build('sheets', 'v4', discoveryServiceUrl= 'https://sheets.googleapis.com/$discovery/rest?version=v4', developerKey=APIKEY) Passing an API key this way seems to work (it throws no exception.) After that, I try to update the spreadsheet with batchUpdate : service.spreadsheets().batchUpdate

google maps api works at localhost but doesn't work at web server

て烟熏妆下的殇ゞ 提交于 2019-12-11 03:18:40
问题 I used google maps api for selecting some points on map and find to shortest driving route. Everythings works in localhost, but when i publish and upload it server, it doesn't work... Why it's happen? There isn't any error. Map is coming on page but i can't see markers and directionResult doesn't load the result. Is it about authorization? I have valid account and api key etc. And i allowed referer of my domain. Edit: I check the script with crome JS debugger. There is no response here;