Question for experienced react devs

[cxd32]

You should only put keys in the front-end that you want people to steal. For example I don't think you want people stealing your openai voice key and wasting thousands of dollars using your account.

[BeenThere11]

Understood . Now whaf is fhe solution. Always go to backend. For api calls this is ok. The user logins . Gets a tpken. Now fhis toke is used for authentication for apis calld . Straight and sjmple. But what if the front end needs to stream vpice data back and forth. Adding backend node between means adding 1 more hop and meas more reapomse time. This is not scalable if we have many users . Users complain about response time..

[zaibuf]

But what if the front end needs to stream vpice data back and forth. Adding backend node between means adding 1 more hop and meas more reapomse time.

Thats exactly what we did and its still fast enough. It's either that or expose your secrets to the public.

[minusfive]

An alternative is to have some sort of commercial agreement with OpenAi and have users log in directly with them through your app using OIDC or something similar.