is there an easier way to change API_KEY for the bundled Web? other than changing the index.prod.js after container is launched.
15 views
Skip to first unread message
Yang Lei
unread,
Aug 1, 2025, 8:55:58 PMAug 1
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Tinode General
as titled, there is a bundled Web in the container.
If I want to change the API_KEY and api_key_salt, i have to pass an --env parameter to container to change api_key_salt and then change the API_KEY manually by log into the container after its launch, by replacing the API_KEY in index.prod.js in the static folder.
is there any other easier way to do that? like by passing another --env parameter.
Thanks
Best regards!
Yang
Gene
unread,
Aug 2, 2025, 3:39:56 AMAug 2
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Tinode General
What are you trying to achieve? What's the use case which requires changing the API key?
Yang Lei
unread,
Aug 2, 2025, 10:57:57 AMAug 2
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Tinode General
This is a good question.
I am a little bit more caring about security.
I would like to change as many as possible keys for enhanced security, as they are public known, customized key pairs are more better for security.
Gene
unread,
Aug 2, 2025, 1:58:45 PMAug 2
Reply to author
Sign in to reply to author
Forward
Sign in to forward
Delete
You do not have permission to delete messages in this group
Copy link
Report message
Show original message
Either email addresses are anonymous for this group or you need the view member email addresses permission to view the original message
to Tinode General
On Saturday, August 2, 2025 at 5:57:57 PM UTC+3 Yang Lei wrote:
This is a good question.
I am a little bit more caring about security.
I would like to change as many as possible keys for enhanced security, as they are public known, customized key pairs are more better for security.
Do you understand that the API key is public and can be easily copied? It's only purpose is some minor deterrence against automatic scraping.