← Back to team overview

ubuntu-phone team mailing list archive

Re: Secret API keys in open source software?

 

Hi Daniel,


On Sun, Jun 16, 2013 at 10:19 PM, Daniel Holm <d.holmen@xxxxxxxxx> wrote:

> I'm integrating scrobble support into Music (app) at the moment, and I
> need to provide two keys, one which is secret and I suppose that I
> shouldn't have this in plain text in the code. So the question is, where
> should I put it? Or what do I do with it?
>
>
I'd be inclined to follow the lead of other Open Source applications. For
example Rhythmbox (our default music player on the desktop) has scrobble
support. The keys are in plain sight in the source code in
 plugins/audioscrobbler/rb-audioscrobbler-service.c.

Cheers,
-- 
Alan Pope
Engineering Manager

Canonical - Product Strategy
+44 (0) 7973 620 164
alan.pope@xxxxxxxxxxxxx
http://ubuntu.com/

Follow ups

References