Client key instead Master key

[pcg92]

Hi, include the master key in a client app is a risk. I think it should be changed by the client key instead.

[phillwiggins]

I wasn't aware people were still using client keys... Is this a Back4App thing?

[pcg92]

We dont use back4app, We have installed parse in our servers, so we have client key, rest api key..
The master key is private, and should onlye be used in the server.

[phillwiggins]

Ah right. Okay cool. I've not got that format on my servers. Send me the key names that are missing and I'll add them to the Parse.initialise method.

…

On Sun, Jan 27, 2019, 11:11 Pablo ***@***.*** wrote: We dont use back4app, We have installed parse in our servers, so we have client key, rest api key.. The master key is private, and should onlye be used in the server. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#56 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AHgn3rFjNFn_f27I8NZ2YxH-epyHw6F8ks5vHYlJgaJpZM4aSbcC> .

[pcg92]

I think with clientKey is enough, thanks for your job 🎉

[phillwiggins]

Just checked and the current setup is safe and correct. Since the migration, the client keys are no longer a concern. However, I will add the client key anyway for people with servers similar to yours.

…

On Sun, Jan 27, 2019, 11:19 Pablo ***@***.*** wrote: I think with clientKey is enough, thanks for your job 🎉 — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#56 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AHgn3k_IVTwatZXav_9KDtuz_eCMuDdWks5vHYtCgaJpZM4aSbcC> .

[phillwiggins]

This has now been added to the develop branch if you wish to test before V1.0.11 release.

[pcg92]

Ok, Im going to try

[pcg92]

Im getting this error

error: Undefined name 'keyHeaderClientKey'. (undefined_identifier at [parse_server_sdk] lib/src/network/parse_http_client.dart:17)

[phillwiggins]

Apologies, a file wasn't being watched during commit. Just updated. Update project now.

…

On Mon, 28 Jan 2019 at 17:59, Pablo ***@***.***> wrote: Im getting this error error: Undefined name 'keyHeaderClientKey'. (undefined_identifier at [parse_server_sdk] lib/src/network/parse_http_client.dart:17) — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#56 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AHgn3ki6xNDnp2HgZ-xLV8P1RGNRZBsZks5vHzqcgaJpZM4aSbcC> .

-- Kind Regards Phill Wiggins [email protected]

[phillwiggins]

Sorted, thanks for your help!