API keys security
Monter opened this issue · comments
Security: Your tool uses Master API key (you can edit and delete) instead of the Monitor-Specific API (read only) keys.
Master key returns all monitored objects, the transition to the Monitor-Specific keys requires the addition of each key separately. This makes it easier to decide which monitored objects you want to show.
That would be a real pain to add 15+ keys
Security is irrelevant...?
No, but since the api key is kept serverside via a PHP variable it is very unlikely that anybody would be able to get it unless they had access to the files. If you make a pull request using Monitor-Specific keys ill gladly accept it!