hey all,
I’m currently struggling with a coding / deployment environment / security problem.
Basically, I’ve built a web-app using the Angular framework that’s served as static js bundle. This app is supposed to be deployed across different environments using different authentication and api configurations. So far I’ve been using an internal environment file and a script feeding the configurations into the bundle at build time, which results in a new build for every config. Now the plan is to use environment files that are loaded upon app runtime initialisation, so that there’s only 1 build and the needed configs can just be exchanged based on environment. However I’m worried about having a file with the api-url and other “secrets” lying openly in the assets folder.
Do you have any tips or resources for best practices on this? My googling-skills seem to be rusty.
Thanks in advance =)