Hello, as I mentioned in a previous post, I decided to learn programming with Xojo, and I have a few questions. While researching classes and looking at example projects, I found something curious. In the example project that explains how to connect to ChatGPT, it suggests placing the API key in a constant. My question is: is this safe? From what I understand, it’s not a good practice to include credentials directly within an application. Instead, it’s better to create an intermediate server to handle requests to the API. This is because my distance-measuring application will use the Maps API (the ADB execution issue I mentioned in the previous post was resolved in a somewhat unusual way). Since I am learning, I refuse to pay $300, so I connect my PC to my phone through a VPN. This way, even when I’m using 4G outside my home, my phone’s IP is always within Xojo’s reach. My last question is: When compiling applications for both PC and mobile, can they be deployed as they are, or is it necessary to apply any technique to protect them from decompilation? (Please note that I’m a beginner).
4 posts - 3 participants