Best Practice: Storing User's Private Credentials for API Calls

Need help APIs
1

I’d like to access data from various services (Google, Facebook, Pinterest, etc.) on behalf of the users of my app. Can I use the various plugins and/or the API Connector to do so? If so, how would I go about storing the private keys or other credentials in a secure way?

2

You don’t need to, as Bubble handles the OAUTH token exchange for you. So you parameterise the OAUTH call in the API connector, and then add in the service calls underneath the will use the token.

Here is an example using Mailchimp.

image
image753×864 58.5 KB

3

Thanks, @NigelG, but I guess I’m a bit confused about how/where users of my app enter their own app id and app secret so that my app can access their account.

EDIT: Oh wait, never mind! I think I understand now. I need to try this out. Thanks for the reply!