How to avoid use of Api keys in the Frontend when using johannschopplich/algolia-docsearch?

The CMS Questions
1

Is there any way i can get around using my api key in the frontend when using Algolia DocSearch | Kirby CMS Plugins?

do i need to build my own backend and use some auth* in order to keep my credentials secret?

2

The search API key is the only API key you can share with the public.

1 Like
3

Thanks @bnomei was kinda afraid that might be the case. But thanks for your reply!

4

If you’re afraid of people abusing the public key, you can set up some restrictions, like “per IP” rate limiting or the maximum number of returned results:

1 Like