Re: Managing Google API key secrets

2019-03-26 Thread Neil McGovern
On Mon, 2019-03-25 at 12:43 -0400, Michael Terry wrote: > Another interesting tidbit from that page is that Google prefers that > you send the user to the system browser for the consent screen, > rather than loading it in-app in a GtkWebKit frame or whatever > (presumably so that the user knows

Managing Google API key secrets

2019-03-25 Thread Michael Terry
There was a previous thread about how GOA's keys are only intended for GNOME-core apps and that third party apps should use their own keys. But there was also some uncertainty around how to do that for Google, since Google's TOS requires that you not commit key secrets to an open git. Here's a