2 ms·
My understanding is that they used cloud functions. Code is being executed on someone else's server, not the client, so the keys don't have to be shared with th
by DangitBobby 5y ago
My understanding is that they used cloud functions. Code is being executed on someone else's server, not the client, so the keys don't have to be shared with the client.
- vonadz 5y agoThat would be the logical solution, but "The javascript is dynamically created and hosted on S3. The keys, etc are safely on a server that runs to generate the file" sounds a lot like they have a server where they build a .js file that is capable of querying Slack, then store that file on S3 for the website to pull whenever someone registers. In that case, the client is pulling a .js file that probably has the Slack API key in it.