Properly Load & Manage API Keys in Python
ฝัง
- เผยแพร่เมื่อ 25 เม.ย. 2023
- In this video, we learn how to properly and securely load and manage your API keys in Python.
◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾◾
📚 Programming Books & Merch 📚
🐍 The Python Bible Book: www.neuralnine.com/books/
💻 The Algorithm Bible Book: www.neuralnine.com/books/
👕 Programming Merch: www.neuralnine.com/shop
🌐 Social Media & Contact 🌐
📱 Website: www.neuralnine.com/
📷 Instagram: / neuralnine
🐦 Twitter: / neuralnine
🤵 LinkedIn: / neuralnine
📁 GitHub: github.com/NeuralNine
🎙 Discord: / discord
🎵 Outro Music From: www.bensound.com/ - วิทยาศาสตร์และเทคโนโลยี
Against which type of attack is this security measure is? What stops intruder to type out these variables and stealing the api keys if they go that far to have an access to files on the server
Great demo - cheers !
Excellent, thanks, keep it up!
Big thanks! I didn't know about SETX for windows!
Tkanks for summary!
Very well explained.
Am I the only one that is addicted to the intro beat❤
Yes 🥳🥳
That's a cool terminal customization
Informative, thank you. Could you explain the secure way of doing this, with encryption and password protection? TIA
One more thing to add to the video - if you'll be uploading the project to github, also create a .ignore file in the same directory as the .env file and simply put ".env" (without the quotes) in it.
my current way to manage api keys is to run it via 1password cli (replaces a string with the key when its run but there is no key in the code), the downsides are that it costs some money and non 1p users need to change it in the code ...
what about the .env file when launching the webste? isnt it vulnerable for malisious users whoose purpouse is to get the api keys?
Great information. Probably better if you slow down for us newbies.😊
thanks
I don't really get it - if you don't want the API key visible in the script but have a file you can open in the same directory then it's not really much improvement on security? I was expecting some encryption?
the .env file would remain on your local machine, won't go into the code repo
@@aflous then how tf are the ones using the code repo going to get it
Does this still work in June 2024? I saw somewhere that client was updated and/or may not be able to be used?
Make some data science,machine learning, data analyst simple projects for resume as well as flask
Yah bro we really need it
100%! Neural networks in simple terms with examples please :))) very easy going format of his vids. Thanks
Thanks for your videos
I'm making an app that uses google's TH-cam API
how to hide the API key when I install the application on another computer?
Flori ❤
Does anyone know what theme he is using for bash or zsh in the Ubuntu environment?
there is no theme whatsoever, this is just an image background used in the new Windows Terminal
@@aflous I don't mean the terminal background. There most definitely is a theme as stock ubuntu bash doesn't have a prompt like this. I assume it's a oh-my-zsh theme or the equivalent for bash.
chears !
TELL ME THE TERMINAL SOFTWARE YOU ARE USING, TELL ME NOW
my python doesnt look lik that
Excellent. first comment !!!
I think that just using module variables in a "secret" directory is just as safe, and simpler, pure python. convince me i am wrong.
nope ;)
What if you need to push your code to production?
Well, that's exactly the main raison for env files! You can push to production and handle configuration outside of your code (via ci/cd tools like Octopus for example)