Open
Description
Having the searchKey
in the clear in engine.json
is not the best approaches from a security point of view.
It would be great if the searchKey
can be read at runtime from an environment variable.
As an example the AppSearchAPIConnector
connector would be something like the following:
const connector = new AppSearchAPIConnector({
searchKey: process.env.REACT_APP_APPSEARCH_SEARCHKEY,
engineName,
hostIdentifier,
endpointBase
});
Would like to get your opinion on this before performing any work. Ready to submit a PR for this feature 😄
Metadata
Metadata
Assignees
Labels
No labels