Hello, We're getting a report from HackerOne that our permanent Prismic API token is included in our app.js file. On our side, we use environment variables to store this value safely, but the gatsby-source-prismic plugin seems to include it anyway. Is it safe to display this value publicly? Accor…

Hey Nicolas, thanks for reaching out! This is still an open discussion about the community built plugin; there's a Github thread that details a similar case and the workarounds that Angelo, the plugin creator, recommends. Please refer to this link to read the full conversation . Thanks

Permanent access token included in app.js source code

Developing with Prismic

Pau closed , flag & select 'Something Else' to reopen. February 17, 2021, 3:11pm 8

This issue has been closed due to inactivity. Flag to reopen.

Topic		Replies	Views
Gatsby-source-prismic - unable to access the Prismic repository Developing with Prismic	5	989	February 9, 2023
Permanent Access token Developing with Prismic rest-api	4	1758	December 9, 2021
Access token permissions Developing with Prismic	5	1060	December 9, 2021
Prismic repo, which is the Release ID? Gatsby-source-prismic usage Developing with Prismic gatsby	1	612	March 7, 2022
Unable to access the Prismic repository. Check that the correct repository name and access token are provided Developing with Prismic gatsby , env-variables-error	4	163	April 29, 2024

Permanent access token included in app.js source code

Related topics