FJurmanovic/grid-gladiators-results
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use non-public env variables for sensitive credentials

Browse Source 
- NEXT_PUBLIC_API_BASE: Keep public (just the endpoint URL)
- SERVER_ID: Remove NEXT_PUBLIC_ prefix (private identifier)
- ACCESS_TOKEN: Remove NEXT_PUBLIC_ prefix (sensitive credential)

Since fetching is server-side, credentials never reach the browser.
Only API_BASE needs to be public if accessed from client in future.
This commit is contained in:
Fran Jurmanović
2026-03-01 14:50:25 +01:00
parent 2da1b150ed
commit fb339c57de
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.env.local.example
View File

@@ -1,3 +1,3 @@
NEXT_PUBLIC_API_BASE=https://acc-api.jurmanovic.com/v1/api
NEXT_PUBLIC_SERVER_ID=2ea19460-f3b6-47ae-a667-c26876425268
NEXT_PUBLIC_ACCESS_TOKEN=EB41048A021F7A7707ED4E5EF37052C401F9ACD5DCDBC94BF16D0456FAAF111A
SERVER_ID=2ea19460-f3b6-47ae-a667-c26876425268
ACCESS_TOKEN=EB41048A021F7A7707ED4E5EF37052C401F9ACD5DCDBC94BF16D0456FAAF111A