Barry,

 

This is pretty much as I had figured—thanks.

 

Jeff Conrad

 

Sent: Tuesday, May 22, 2018 10:55 AM



It's impossible as such. The client side app needs the key to function. 

 

You could make it much harder to find (eg transfer it only in a encrypted AJAX 
request) but its still going to be pretty easy to figure out (ie will get 
written into network requests to Google) . 

 

For the static API can sign your requests (server side!) 

https://developers.google.com/maps/documentation/maps-static/get-api-key#digital-signature

but not really for 'Dynamic' Javascript API. 

 

Frankly if you've setup the key correctly in console, it should be very hard to 
abuse. 

 

On 22 May 2018 at 18:48, Jeff Conrad <jeff_con...@msn.com 
<mailto:jeff_con...@msn.com> > wrote:

Does anyone know of a good way to hide a Google Maps API key in a pure 
client-side JavaScript application? 

-- 
You received this message because you are subscribed to the Google Groups 
"[deprecated] Google Maps JavaScript API v3. Please use the latest post." group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to google-maps-js-api-v3+unsubscr...@googlegroups.com.
To post to this group, send email to google-maps-js-api-v3@googlegroups.com.
Visit this group at https://groups.google.com/group/google-maps-js-api-v3.
For more options, visit https://groups.google.com/d/optout.

Reply via email to