I am developing an add-in for Geotab Drive. I want my add-in to call my own API (hosted on prem) which uses a bearer token for authentication. As we know, the add-in is front end only so I cannot store my secrets there. Where should I store the secrets securely to be able to obtain the token to then call my API from the add-in? My other apps store them in key vault, but it's not obvious how to implement that here. Should there be some sort of back-end proxy going on here? All I have now is a React add-in running locally. Please advise.

How to call my own API from Geotab Drive add-in?

page-user page-user-emily-luhtala-2069 template-account-profile page-status-200 theme-harmony user-guest

Company

Title

<p>Yes,  <a href="/user/misamc24" data-id="2044" data-value="misamc24" data-denotation-char="@" class="text-decoration-none mention">@misamc24</a>​ 's answer helped immensely. Thank you!</p>

<p>I am developing an add-in for Geotab Drive. I want my add-in to call my own API (hosted on prem) which uses a bearer token for authentication. As we know, the add-in is front end only so I cannot store my secrets there. Where should I store the secrets securely to be able to obtain the token to then call my API from the add-in? My other apps store them in key vault, but it's not obvious how to implement that here. Should there be some sort of back-end proxy going on here? All I have now is a React add-in running locally. Please advise.</p>

Viimane tegevus

How to call my own API from Geotab Drive add-in?