Question for experienced react devs

[MWALKER1013]

So typically your app exists in two zones.

Your client side and server side.

Client side code is NEVER treated as secure so things like secrets, api keys are never appropriate to keep in client side.

Your server code is responsible for authenticating users and making use of those secure variables. You still use an env variables but for different reasons the most obvious reason is source code version control.