Keep API Key Outside of Gradle and Git

• gradle-recipes

  9 1,825 8.7 Kotlin

  Ready-to-use recipes for common build customizations that showcase the Android Gradle plugin's public APIs and DSL.

  

That recipe is only adding hardcoded values as build config fields. If you look at https://github.com/android/gradle-recipes/blob/agp-7.0/Kotlin/addCustomResValueFromTask/app/build.gradle.kts for example they create a task which can be cached and runs only when actually needed (if the inputs change for example).

• secrets-gradle-plugin

  3 1,027 4.7 Kotlin

  A Gradle plugin for providing your secrets to your Android project.

  

I use this for storing my keys. (Recommended by Google also) https://github.com/google/secrets-gradle-plugin

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• httptoolkit

  36 2,443 4.1

  HTTP Toolkit is a beautiful & open-source tool for debugging, testing and building with HTTP(S) on Windows, Linux & Mac :tada: Open an issue here to give feedback or ask for help.

  

This tactic works well when you're open-sourcing applications. One way of fetching secrets is by downloading the APK. The second is by using tools such as HTTP Toolkit. If you manage to reverse-engineer an API, you'll be able to gain an in-depth understanding of client-server communication.

Suggest a related project