Hacker News Reader

This looks nifty but what is the story on security?

It is great to have the File0 code next to the over verbose S3 code.

The S3 code contains a few security operations that are missing in the F0 code.

What is the story on that?

The file0 package is relying on the presence of an evironment variable F0_SECRET_KEY that you can obtain from the dashboard. The example code is fully functional and secure, the authentication is happening in the background.

If you use env variables for the F0 secret you should do the same for S3? You’ve written the auth there out explicitly, but a new S3 client will pick them up from the environment as well.

Reply on news.ycombinator.com