Where to store my API key in an open source Python Script

Question

So I'm working on with an api from IsThereAnyDeals and I'm wondering where I should store my API key? Is it possible to store it remotely or is it fine to just store it inside the script?

Neither. Store it outside the script and have the script read from the file(which isn't stored in any repository). — ewokx
– ewokx, Commented Nov 23, 2020 at 9:08
You only need to store it remotely (securely on the host server) if you’re going to deploy it somewhere. Otherwise keep it a “secret” (local file). — JBallin
– JBallin, Commented Nov 23, 2020 at 9:16

Serial Lazer · Accepted Answer · 2020-11-23 09:14:48Z

3

ConfigParser is a good choice to setup your configuration-files in Python.

Something like this:

import configparser cfg = configparser.ConfigParser() cfg.read('example.cfg') print(cfg.get('KEYS', 'api_key', raw=''))

example.cfg:

[KEYS] api_key: @#$@GSSAS

answered Nov 23, 2020 at 9:14

Serial Lazer

1,6691 gold badge9 silver badges16 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Dave Cordero Over a year ago

My API key will still be exposed. It that okay?

Serial Lazer Over a year ago

Of course you shouldnt be uploading the example.cfg! Thats only for your instance

MajaOlsz · Accepted Answer · 2021-04-08 15:08:17Z

You can add your cfg file to .gitignore, so that this file doesn't get uploaded, when you do a git commit.

You can read more about that topic here: How to ignore certain files in Git

Collectives™ on Stack Overflow

Where to store my API key in an open source Python Script

2 Answers 2

2 Comments

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

2 Comments

Comments

Linked

Related