Do I understand correctly that the client_secret that I put in .env and will use through process.env will NOT be secret?

Question

Vue.js

Those. that the CLIENT_SECRET that I will use in the application through process.env.CLIENT_SECRET will in any case be in the assembly and will be available to everyone, right?

And how then to be?

How to store data for authentication through OAuth?

Answer 1

Yes, it will be visible. On the topic of how to be articles and video tutorials wagon and a small cart. In short: the backend generates keys, sessions and other ways to protect the application, and checks the keys with each request or only when necessary.