I have an older integration that calls an API Management instance using a SAS token and subscription identifier. It previously retrieved the subscription's primary and secondary keys, but…
I have an older system that uses a SAS token containing an identifier and key to call an API Management endpoint and retrieve a subscription's primary and secondary…
I have an API key for a service, and I've heard that putting it directly in frontend code is unsafe because users can inspect the app with browser…
I have an API key that my frontend application needs to use. I've heard that putting the key directly in frontend code is unsafe because anyone can inspect…
OIDC makes a lot of sense for cloud services because edge functions can exchange a runtime identity for short-lived credentials instead of storing permanent AWS access keys in…
I'm trying to understand what remains after replacing long-lived cloud credentials with workload identity and OIDC. Using identities for services like AWS or S3 seems to eliminate a…
I'm curious how other developers manage API keys, access tokens, passwords, and similar secrets for personal projects and web applications. I've mostly used a plain text note so…
I'm trying to figure out how to add API keys when using Docker. I've seen instructions to go to the settings and find an option for API Keys,…
Hey everyone! I'm looking to gather insights on how different teams manage expirations for various time-sensitive assets, such as TLS certificates, API keys, licenses, and contracts. Although it…
I'm curious about how you all manage the rotation of security keys, like API keys. Is there a tool you use that sends reminders via Slack or email…
I'm curious about how teams effectively manage the lifecycle of their secrets. Recently, we spent quite a bit of time troubleshooting a legacy system that broke due to…
Last week, we had a close call when an old API key unexpectedly surfaced in a place it shouldn't have been. Thankfully, nothing bad came from it, but…
I'm diving into self-education about best practices in software development, particularly focusing on working with a team and using tools like Git for version control. I'm seeking out…
I've noticed a lot of developers, myself included, often make silly mistakes like hardcoding API keys for quick tests, logging sensitive user data, or forgetting to write tests…
Hey everyone! We're managing a third-party app that needs a lot of oversight when it comes to API keys, which are currently stored locally on our SaaS platform.…
I'm trying to figure out how to implement a system where a group of API keys shared by different clients have a combined usage limit—like 10,000 requests per…
A client reached out to me about an issue they're having with email deliveries after renewing their WP Mail SMTP license. They're getting an error message that says:…
I'm curious about the general consensus on whether it's safe to store API keys within scripts in private Git repositories. My team is just starting our automation journey,…
I've been noticing that my API keys are ridiculously long—sometimes longer than a modern novel! I'm curious, does having a key that's over 50 or even 100 characters…