API keys are exposed on the client side

[fvoordeckers]

⚠️ Security risk

The hooks to fetch te data call the services directly from the frontend.
This exposes the API key to the user. Since there are rate limits and pricing models linked to the amount of calls, it would be easy to abuse API keys.

How to reproduce

1. Setup a project
2. Load the webpage and inspect the network
3. The API key will be exposed to any visitor

How to solve

The frontend should not be aware of the API endpoint and should go through it's own API to fetch the data.
The hooks should only handle the API you manage yourself and the data it provides.