5 ms·
This looks nifty but what is the story on security? It is great to have the File0 code next to the over verbose S3 code. The S3 code contains a few security o
by ThinkBeat 2y ago
This looks nifty but what is the story on security?
It is great to have the File0 code next to the over verbose
S3 code.
The S3 code contains a few security operations that are missing in the F0 code.
What is the story on that?
- davidkarolyi 2y agoThe file0 package is relying on the presence of an evironment variable F0_SECRET_KEY that you can obtain from the dashboard. The example code is fully functional and secure, the authentication is happening in the background.
- Aeolun 2y agoIf you use env variables for the F0 secret you should do the same for S3? You’ve written the auth there out explicitly, but a new S3 client will pick them up from the environment as well.