Storing the API key

WebViewer
1

Hi,

In the docs the api key is stored as a string in the javascript files.

Is this the official way to do it? I’m concerned that a user may read the js bundle and take the API key.

Thanks

2

The API key is locked to the domain that you register for.

So, for example if you register a key for 39rc.com then the key only works on 39rc.com. It can’t be used anywhere else.

In theory, yes I think a user could extract the license key from the JS bundle, but they can’t do anything with it unless they have deployment access to your web domain. In this way the key is kind of safe to expose.