'Authorize.net Accept.js payment form: Is it safe to have ApiLogInKey and ClientPublicKey on the frontend?

On the Accept.js documentation, either self-hosted or Accept.js hosted form. The ApiLogInKey and ClientPublicKey are required on frontend, either pass into Accept.dispatch function/API call or on the form button as custom attributes. Is it safe to have them on the frontend or is there a way to hide them or move them to the backend?

authorize.netaccept.js


Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source

Related Questions