openai api key automatically rotating when deployed

Question

I'm building a web page using openai gpt API in reactjs. I saved my API key on .env file then gitignored it. And I deployed my code with gh-pages, but openai detects it and rotate the key automatically. How can I use API key properly?

const DEFAULT_PARAMS = {
            model: "gpt-3.5-turbo",
            messages: [{"role": "user",
                        "content": message
            }],
            temperature: 1,
            max_tokens: 1000
        };
        const params_ = {...DEFAULT_PARAMS};
        const result = await fetch('https://api.openai.com/v1/chat/completions', {
            method: 'POST',
            headers: {
                'Content-Type': 'application/json',
                'Authorization': 'Bearer ' + String(process.env.REACT_APP_OPENAI_API_KEY)
            },
            body: JSON.stringify(params_)
        });
        const data = await result.json()

picsoung · Accepted Answer · 2023-03-28 02:58:26Z

0

You can refer to this question regarding securing secrets on static websites hosted on GitHub Pages.

Short answer: it's impossible because everything is exposed in the code.

You need to use another way to deploy your website. For example, frameworks like NextJS.

answered Mar 28, 2023 at 2:58

picsoung

6,5581 gold badge21 silver badges36 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Aaron Meese · Accepted Answer · 2023-09-24 23:58:17Z

0

First encrypt the API key using crypto-js:

const encryptText = (plainText: string): string => {
  return CryptoJS.AES.encrypt(plainText, secretKey).toString();
};

Then copy the results and remove the above code. Next, do this in the file where the API key is needed:

const decryptText = (encryptedText: string): string => {
  const bytes = CryptoJS.AES.decrypt(encryptedText, "your password");
  return bytes.toString(CryptoJS.enc.Utf8);
};

And you can use the authorization like so:

Authorization: `Bearer ${ decryptText(encryptedAPI)}`

edited Sep 24, 2023 at 23:58

Aaron Meese

2,3737 gold badges30 silver badges48 bronze badges

answered Sep 19, 2023 at 6:15

user19705293

11 bronze badge

Comments

lrabbit · Accepted Answer · 2023-03-29 03:51:07Z

-1

I use nestjs framework, the apiKey also rotated.. enter image description here

answered Mar 29, 2023 at 3:51

lrabbit

12 bronze badges

1 Comment

devpolo Over a year ago

Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.

Collectives™ on Stack Overflow

openai api key automatically rotating when deployed

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

Comments

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related