Include the key.js file in the source tree

Bug #1471329 reported by Nekhelesh Ramananthan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ubuntu Weather App
Fix Released
Low
Victor Thompson

Bug Description

Is there any reason why we aren't including the key.js file in the source tree? Either way weather app is an open-source app and thereby anyone can grab the key by looking at the installed files of the weather app. It is just an unnecessary step for developers and is incredibly annoying.

Related branches

Revision history for this message
Victor Thompson (vthompson) wrote :

I agree that it's inconvenient, however, API keys for external services are something that should be managed at configuration/build time of the app. Any subsequent fork of the project shouldn't inherit an API key and should file for their own. One option could be to obfuscate the key--however, I assume this isn't acceptable either.

Revision history for this message
Alan Pope 🍺🐧🐱 🦄 (popey) wrote :

We agreed this with the data provider. We can re-visit it, but they were concerned about key leakage, despite it not being hidden particularly well.

Changed in ubuntu-weather-app:
status: New → In Progress
importance: Undecided → Low
assignee: nobody → Victor Thompson (vthompson)
Revision history for this message
Ubuntu Phone Apps Jenkins Bot (ubuntu-phone-apps-jenkins-bot) wrote :

Fix committed into lp:ubuntu-weather-app/reboot at revision 64, scheduled for release in ubuntu-weather-app, milestone 2.0

Changed in ubuntu-weather-app:
status: In Progress → Fix Committed
Andrew Hayzen (ahayzen)
Changed in ubuntu-weather-app:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.