Hi all,
I imagine this is a very noobish question, but I am having trouble finding information on what the best practice is for storing API keys in my app. My app integrates Twilio messaging. All API calls require an Authorization header with a key made from <AccountSid>:<ApiKey> encoded to base64. I am not sure where or how to store this, so that it cannot be leaked or accessed by end users.
It would be very bad if this was leaked, how should I go about storing it? While testing I'm just building the string in the api call and sending it, but I imagine that is not the correct approach.
Any tips/suggestions/resources would be appreciated! I am using Supabase as my database
.jpeg/public)