Re: secret api keys

2022-10-27 Thread Rajesh Kr. Paul
If you set debug=true, that's show only errors in url, views, and templates. Have no chance to show your secret key, which you placed in settings.py file. On Thu, 27 Oct, 2022, 5:04 am Muhammad Juwaini Abdul Rahman, < juwa...@gmail.com> wrote: > People can't see it straight away. > > However, let

Re: secret api keys

2022-10-26 Thread Michael Rohan
Hi, This is one of the drivers for my package: https://django-yamlconf.readthedocs.io/en/latest/ Externalize setting values to yaml files. Take care, Michael On Wed, Oct 26, 2022 at 9:45 PM Mike Dewhirst wrote: > On 27/10/2022 3:32 pm, Mike Dewhirst wrote: > > Not a dumb question but frequen

Re: secret api keys

2022-10-26 Thread Mike Dewhirst
On 27/10/2022 3:32 pm, Mike Dewhirst wrote: Not a dumb question but frequently asked. There are two approaches - one is to export your secrets as environment vars and read them from there. The other is to keep them in disk files and read them as required. In both cases the idea is to keep se

Re: secret api keys

2022-10-26 Thread Muhammad Juwaini Abdul Rahman
People can't see it straight away. However, let's say if you forgot to set debut = False, they can see it. Not straight away, but very trivial. It is advisable to put your secret keys in external file (.env for example) and use library like django-environ to get the value. On Wed, 26 Oct 2022 at

Re: secret api keys

2022-10-26 Thread Lakshyaraj Dash
No one can see your secret keys. It's a far thought, no can can see on what language you server side is written in. On Wed, Oct 26, 2022, 20:39 john fabiani wrote: > Hi, > > Maybe a dumb question but if I add secret keys in my settings.py file > (or should it be placed) will they be protected fr