a note about security. fix #51

:w
This commit is contained in:
Pedro Belo 2016-11-28 15:28:22 -08:00
parent ca59b23b2f
commit 983355b32b

View File

@ -23,6 +23,9 @@ Config.API_URL // 'https://myapi.com'
Config.GOOGLE_MAPS_API_KEY // 'abcdefgh'
```
Keep in mind this module doesn't obfuscate or encrypt secrets for packaging, so do not store sensitive keys in `.env`. It's [basically impossible to prevent users from reverse engineering mobile app secrets](https://rammic.github.io/2015/07/28/hiding-secrets-in-android-apps/), so design your app (and APIs) with that in mind.
### Android
Config variables set in `.env` are available to your Java classes via `BuildConfig`: