Hey @ram . Is there any other way to do this without exposing API Key in headers of FE request? Can anyone give a code example on how to do it?
All the code examples Nylas has in their docs are just mentioning sending access token but everytime I try to send the access token on my custom identity wrapper class, the request to /calenders endpoint just throws a CORs.
There are alot of tokens here:
id token, access token, refresh token, client id, api key, grant id.
Can anyone just provide an example mentioning which one to use where? I’ve tried all sorts of different combinations and the only one that works is the one with API key sent in header but that is super insecure and can lead to serious problems.
@dhruv have you done anything about keeping api key safe?
We also have this thread with relevant discussion.