Google OAuth - Keeping the Client ID Secret
When using OAuth in the Google Cloud Endpoints JavaScript client, how do you preserve the secrecy of the client ID? How to implement 0Auth in the Google Cloud Endpoints JavaScript client is detailed here . In the code snippet below the client ID is passed as a parameter to the OAuth method. gapi.auth.authorize({client_id: CLIENT_ID, scope: SCOPES, immediate: mode}, callback); Since the end user will receive the script file in clear text, regardless of the use of HTTPS, how would you avoid handing the client ID over to every user you serve? After all, it would be rather simple to comb the