Questions tagged [app-secret]

68 questions
0
votes
1 answer

Manually setting user bound properties

I am working on a script, which needs to store a secret API key. In the old editor, there was an option to set user properties directly from the UI of the editor (which was in meantime removed), and I do not see any similar option in the new one. I…
Kyras
  • 63
  • 1
  • 5
0
votes
1 answer

why does secret management tool SecretHub work locally but not in heroku production?

I decided to implement a secret management service (secrethub.io) for a node.js server hosted by Heroku. Its install process goes something like: npm install --save-dev @secrethub/cli secrethub init (then a credential is given once you signup) then…
Jim
  • 1,988
  • 6
  • 34
  • 68
0
votes
1 answer

Can I create a secret in AWS that is only available to a Cognito user but not to any other AWS user?

I need to implement some zero-knowledge stuff and wondering if I can: Create a User in my platform Create a Cognito User associated with this user Do some client-side magic and push a secret key into the *any-storage* This secret key shouldn't be…
0
votes
2 answers

Kubernetes Secrets Auto Delete

I am wondering about Kubernetes's secret management. I have a process that generates a lot of secrets that only need to live for a short while. I would like for these secrets to come from Vault or a similar service in the future. However, for right…
Aaron
  • 131
  • 2
  • 12
0
votes
1 answer

Account Kit App Secret in Facebook developer not displaying

I'm working on an android project and I need to find the Account Kit App Secret to configure the application login function. When I select account kit settings and then it shows "Account Kit is no longer available to new developers". My previous…
Pasindu Weerakoon
  • 588
  • 1
  • 11
  • 39
0
votes
1 answer

go-git basic authentication issues when getting credentials from Kubernetes secrets

Using go-git for a cloning a github repo. Trying to use personal token for authentication using something like this func (g *Git) pullOptions() *gogit.PullOptions { branch := fmt.Sprintf("refs/heads/%s", g.BranchName) // Return options with token…
f-z-N
  • 1,645
  • 4
  • 24
  • 38
0
votes
1 answer

The best way to store "app secret" in a mobile web application?

I want to develop a "responsive mobile web application (iOS / Android)" with JavaScript to interact with Smart Contract and blockchain. I decided to develop a hybrid mobile web application. However, the question is how to store the App Secret safe…
Questioner
  • 662
  • 1
  • 10
  • 26
0
votes
2 answers

Can access to play secret allow server compromise/cryptocurrency theft?

Our play secret was leaked in source version control system. Few days later our server was compromised and cryptocurrency stolen. Could it be correlated? What exactly can be done using play secret? Suppose attacker does not have latest source but an…
Wen12
  • 1
  • 1
0
votes
1 answer

Storing SQL Database Connection Strings in Azure Key Vault

I'm moving application secrets from a source controlled web.config (with transforms) to Azure Key Vault secrets. This works well for things like passwords, but SQL database connection strings seem difficult to move out of the web.config. There are…
0
votes
1 answer

Get Facebookpageposts on website

I'm trying to get an overview of all the posts op a facebook page in my website. But I get a Invalid appsecret_proof provided message.When I try it in the Graph API Explorer everything works fine but when I try it in my testplace it doesn't work.…
0
votes
1 answer

How to get images from FB to website

I'm working on publishing posts from our FB page on our website. Each new post and photos we added into our FB page I need to show in our website too. I have this code, but don't working as I need. require…
user2834997
0
votes
2 answers

Android/IOS Secret expiration management with client credentials flow

I'd like to know if there is any strategy for managing secret expiration in mobile devices. In a scenario where an authorization server allows a mobile client to authorize against him using a resource owner password flow in combination with client…
Miguel A. Arilla
  • 5,058
  • 1
  • 14
  • 27
0
votes
1 answer

OAuth credentials in secrets.yml in development section

My Rails app uses OAuth authentication. For production credentials, I use dotenv gem. config/secrets.yml: production: secret_key_base: <%= ENV['SECRET_KEY_BASE'] %> facebook_app_id: <%= ENV['FACEBOOK_APP_ID'] %> facebook_app_secret: <%=…
Evmorov
  • 1,134
  • 22
  • 28
0
votes
0 answers

What is this code for in the head of the DiscoverWestworld.com website?

I happen to be looking at the code for the DiscoverWestsworld.com website and noticed something I've never seen before in the . Does anyone know what this is for?
jimmyplaysdrums
  • 239
  • 4
  • 15
0
votes
1 answer

Get latest post from facebook page (feed)

I'm trying to get the latest facebook post from a facebook page. I'm working with the facebook php SDK v4 (https://github.com/facebook/facebook-php-sdk-v4/). I've added the library (php sdk) to composer: composer require facebook/php-sdk-v4. My…
nielsv
  • 6,540
  • 35
  • 111
  • 215