[SOLVED] Hello, I have a security question

the question is about the security of the app, if moralis takes care of everything and the way to hide the api key is .env, would the app be secure? or should I make a node js app to restrict https requests and if moralis has to limit the use to an ip or url, sorry for the question I’m still a novice

You shouldn’t use secrets like API keys in a frontend or site. You can use a backend/server. It is up to you how you secure these environment variables or things like API keys.

limit the use to an ip or url

You would need to implement this yourself as well.

1 Like

perfect, thank you very much I guessed it but I wanted to be sure

1 Like