I am developing a marketplace app in react and it communicates to an external API. The communication to external endpoint requires a secret. I was wondering what would be the best approach to store this secret. I stumbled across hs secrets. Which looks like it would fulfill the criteria. But I am not able to find any documentation on how to use those hs secrets inside my marketplace app. I did see some documentation on how serverless functions can use those secrets but that is not relevant as I am working on marketplace app. If anybody have some insights on this please share your thoughts.
It is a ‘UI Extension’ using HubSpot Projects’. Yeah we are not storing any secrets in code. But the market place app should make a request to an external endpoint and that endpoint needs a code to authenticate the request. Yes we are also validating the hubspot signature in the backend when handling the request. Adding the code adds another layer of security to protect our endpoints. That is why been looking if there is a recommended way to store these secrets. hs secrets is also something that would be suitable. Unfortunately that is not available with UI extensions projects app
Hi @Madhan-d,
Thank you so much for taking the time to share your valuable feedback, it truly means a lot to us!
I recommend submitting your thoughts through the HubSpot Developer Feedback form so they reach the right team, but if you’d prefer, I’d be more than happy to submit it for you.
If there’s anything else you need or any way I can assist further, please let me know, I’m always here and happy to help!
Thank you so much for confirming @Madhan-d ! I went ahead and submitted your feedback to the developer forum.
If you have any other suggestions or questions, feel free to share, I’m always here to help.
Thanks again for your input!
Bérangère
