Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Secure storage for keys in chatcraft #748

Open
tarasglek opened this issue Nov 19, 2024 · 0 comments
Open

Secure storage for keys in chatcraft #748

tarasglek opened this issue Nov 19, 2024 · 0 comments

Comments

@tarasglek
Copy link
Owner

I believe we want something like origin-isolated storage.

Some notes in https://chatcraft.org/api/share/tarasglek/20XBZ-vNRsH6R5s4bchKP.

I think we should have an iframe that

  • Allows one to add provider (with api key
  • Allows one to update api keys
  • allows listing providers(while withholding api key)
  • provides an api that can proxy fetch() calls and inject the bearer token

Basically it should serve as write-only way to store keys, while allowing some read metadata. This way any generated or otherwise injected code can't access our precious keys.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant