How do I prevent my Firebase API Key from being exposed through my google-services.json file?











up vote
0
down vote

favorite












My Android application's google-services.json file is committed with the rest of my project to a public repo. This is a bad idea for the reasons detailed here.



{
"project_info": { ... },
"client": [
{
...,
"api_key": [
{
"current_key": "MY_API_KEY"
}
],
...
}
],
"configuration_version": "1"
}


How can I have the API key get retrieved from a global context during build rather than stored out in the open? An expansion on this approach would be best!










share|improve this question


























    up vote
    0
    down vote

    favorite












    My Android application's google-services.json file is committed with the rest of my project to a public repo. This is a bad idea for the reasons detailed here.



    {
    "project_info": { ... },
    "client": [
    {
    ...,
    "api_key": [
    {
    "current_key": "MY_API_KEY"
    }
    ],
    ...
    }
    ],
    "configuration_version": "1"
    }


    How can I have the API key get retrieved from a global context during build rather than stored out in the open? An expansion on this approach would be best!










    share|improve this question
























      up vote
      0
      down vote

      favorite









      up vote
      0
      down vote

      favorite











      My Android application's google-services.json file is committed with the rest of my project to a public repo. This is a bad idea for the reasons detailed here.



      {
      "project_info": { ... },
      "client": [
      {
      ...,
      "api_key": [
      {
      "current_key": "MY_API_KEY"
      }
      ],
      ...
      }
      ],
      "configuration_version": "1"
      }


      How can I have the API key get retrieved from a global context during build rather than stored out in the open? An expansion on this approach would be best!










      share|improve this question













      My Android application's google-services.json file is committed with the rest of my project to a public repo. This is a bad idea for the reasons detailed here.



      {
      "project_info": { ... },
      "client": [
      {
      ...,
      "api_key": [
      {
      "current_key": "MY_API_KEY"
      }
      ],
      ...
      }
      ],
      "configuration_version": "1"
      }


      How can I have the API key get retrieved from a global context during build rather than stored out in the open? An expansion on this approach would be best!







      android firebase repository api-key






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Nov 18 at 3:05









      AlleyOOP

      5972926




      5972926





























          active

          oldest

          votes











          Your Answer






          StackExchange.ifUsing("editor", function () {
          StackExchange.using("externalEditor", function () {
          StackExchange.using("snippets", function () {
          StackExchange.snippets.init();
          });
          });
          }, "code-snippets");

          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "1"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });














           

          draft saved


          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53357530%2fhow-do-i-prevent-my-firebase-api-key-from-being-exposed-through-my-google-servic%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown






























          active

          oldest

          votes













          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes
















           

          draft saved


          draft discarded



















































           


          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53357530%2fhow-do-i-prevent-my-firebase-api-key-from-being-exposed-through-my-google-servic%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          Paul Cézanne

          UIScrollView CustomStickyHeader Resize height generates problems when scroll is too fast

          Angular material date-picker (MatDatepicker) auto completes the date on focus out