DEV Community

Discussion on: Hide your API Keys with Netlify Functions

lawrencejohnson profile image
Lawrence

You have yet to explain how hiding a key server-side is wrong or incorrect. You say that its impossible to have server-side code with Netlify (which may be because I have not used it), but that is not what OP said.

Get over yourself; you're just looking for a problem and you picked the least appropriate comment to do so. There's no doubt that someone who was thinking about storing their API keys in a code repo as OP proposed that will benefit from the explanation of how that is a poor choice. That is 100% platform independent.

Cool that you know so much about Netlify though. I bet that's super useful.

Thread Thread
fjeddy profile image
Freddy

Dude, get over yourself; you're just looking to add confusion. There is no doubt that the OP wrote this article specifically to avoid storing the API key in the code, considering that would reveal it to the world, being static and all :)

The facts are that there is only one person flexing; and that's you, from your very first comment where you add irrelevant context to every reply you have made since.

Thread Thread
lawrencejohnson profile image
Lawrence

The server-side element doesn't even have anything to do with Netlify. It's airtable. I mean, I don't see how you aren't getting this (maybe just bad troll?)

"So this fetch request will just call the netlify function and pass the form fields into the server-side function and that server-side function is the one calling the Airtable API."

Stop the try-hard act. You'll never learn anything with that attitude.

Thread Thread
fjeddy profile image
Comment marked as low quality/non-constructive by the community. View Code of Conduct
Freddy

LOL! Now you're truly showing how incompetent you are.

Airtable is only relevant as that's the API he is trying to communicate with from Netlify. And he is trying to make calls to Airtable from Netlify without revealing the API token, considering Netlify sites are run on a CDN and requires the site to be static.

Airtable is his chosen third-party API, it has no relevance to his problem or the article in question; it could be any API. I guess your next advice is fetch the API client key directly from the API right?

Idiot. You are the one that needs to listen, the one with a lot to learn. After all, I'm the one with experience here, you're just the troll throwing out random comments with no context :)