muicci
muicci2mo ago

muicci - Hi community, I've got a question. We ...

Hi community, I've got a question. We collect API keys on our platform from our clients to be used with Buildship workflow. What would be the best and safe way to do that?
Solution:
@muicci you can also check out this Bring your own key tutorial that would work well here for allowing the users of your platform to use their API key in the workflows https://docs.buildship.com/tutorials/byok
Bring Your Own Key (BYOK) – BuildShip
A unified resource to start building your backend with low-code. Dive into triggers, nodes, and step-by-step guidance to jumpstart your workflow creation.
Jump to solution
4 Replies
Gaurav Chadha
Gaurav Chadha2mo ago
Hi @muicci, you can use Secret Manager which is an effective way to safeguard your secret keys https://docs.buildship.com/secrets
BuildShip Secrets Manager – BuildShip
Learn how BuildShip securely manages sensitive information like API keys using Google Cloud Secret Manager, ensuring confidentiality and security in your workflows.
muicci
muicci2mo ago
Thank you, but I am looking for the way to store API of my clients, dynamically. The client / user uses our Textfield in the frontend and we store his key safely and use it in the workflow
Gaurav Chadha
Gaurav Chadha2mo ago
Okay, for this you can use the environment variable logic instead, where you'll be able to get the keys from your client side (frontend) and store them safely in the workflow env variable (workflow level env variables remains safe and scoped within the workflow only). https://docs.buildship.com/env-var#setting-environment-variables. Here is an example remix you can clone and try - https://buildship.app/remix/79f83874-7246-4e8d-a86b-0b3bb6c031d9 this logic is taking the key from the request body dynamically (which will be fetch from your client side) then store it to workflow scoped environment variable. @muicci
Solution
Harini
Harini2mo ago
@muicci you can also check out this Bring your own key tutorial that would work well here for allowing the users of your platform to use their API key in the workflows https://docs.buildship.com/tutorials/byok
Bring Your Own Key (BYOK) – BuildShip
A unified resource to start building your backend with low-code. Dive into triggers, nodes, and step-by-step guidance to jumpstart your workflow creation.