i know about the dashboard but couldnt find them anywhere
You need to create an app first, go here - https://www.reddit.com/prefs/apps
Referencing old thread - https://www.reddit.com/r/redditdev/comments/251v3z/how_to_get_an_api_key/
You can find the dashboard by clicking on the "hamburger" icon in the top left-hand corner of the screen.
Where to store client_id and client_secret
How to Generate and Authorize Reddit API Credentials for use With the OpenBB Terminal.
How to implement Client ID and Client Secret based API Authentication for my REST API?
How do I hide the client id and client secret?
DevTools? Are you sure that you are using NodeJS and not writing code for the browser instead?
In the browser, you can't hide secrets, because a) the code is run in the browser, so the browser needs to know all the data, and b) even if you could magically hide the secret in the code, the browser still needs to send the info in the actual request (which you can see in the Network tab of the DevTools).
That's why any secret needs to be handled server-side, not client-side.
More on reddit.comVideos
Hi, Im new to praw 4. Could someone tell me what to input to client_id and client_secret in the praw.Reddit() function?
Thanks
Hey guys!
I've been trying to get a client ID and Secret for a project with PRAW, but the provided link (https://www.reddit.com/prefs/apps) doesn't work. Someone experiencing this? Is this link up-to-date or broken?
I can only access a page that says: "Welcome back! You are already logged in and will be redirected back to Reddit shortly. If you are not redirected automatically, follow this link."
Clicking on "this link" does nothing.
Any help appreciated. Thank you :D
Hello guys. New programming learning about backend (SpringBoot). I am building a simple library app and am using Google Oauth2 for log in and out, and planning to host it using AWS with docker. I want to ask, what are some of the most popular ways to store client_scret in a safe way?
I tried googling but never seems to find a straight answer. There must be like, top 3 most popular ways to store client secret, or something.
Please help
I'm reading https://socialiteproviders.com/Reddit/ and I want to implement Reddit OAuth login on my site. Does Reddit allow that? Where do I start`?
Learning OAuth2, and I'm seeing the reason for using PKCE is for when you have a completely public app, like a javascript application where it's entire source code lives in the browser and therefore the client_secret would be exposed.
It then recommends using PKCE. But in this case, isn't the code_verifier basically the password? It sends the initial code_challenge, the hashed value, in the original request...so this could be intercepted, it is even stated it's not a secret.
It then POSTS the code_verifier later with the auth_code from what I'm reading. So, how is this different than having a client_secret? If an app's source is published, won't the code_verifier be leaked as well? Or maybe it's generated at run time and that's the point...
If so, is the security of this flowed based on the fact that the password is basically randomly generated?