1

I am using Google Maps API v3. I have ran into some issues recently and I would like to share my code with others for debugging purposes, for example on JSfiddle, Codepen etc.

How can I do this without disclosing my API key?

Earlier versions of Google Maps API allowed me to simply include https://maps.googleapis.com/maps/api/js in the 'External Resources' panel, but this no longer works.

TheOrdinaryGeek
  • 2,273
  • 5
  • 21
  • 47

1 Answers1

0

You may just simply restrict your API key to JSFiddle or Codepen via http referrers,for JSFiddle, the best practice would be:

jsfiddle.net
jshell.net
*.jshell.net

by doing this, it will allow you to use your API key freely in JSFiddle or Codepen, in case that the API key will be used in other sites, it will return a Degraded Experience, so you don't have to worry about unexpected usage.

Please note that the http referrers above are for JSFiddle only as I haven't tried restricting for Codepen yet.

You may also visit API key best practices to learn other methods of restricting API key.

Shawn Domingo
  • 1,371
  • 1
  • 11
  • 16
  • Restricting to the domain only allows others to use your key on JSFiddle / Codepen, too. Restricting by a user would be optimal but isn’t easily done because of the Iframe rendering. – roka Aug 29 '19 at 13:40