Vibe Coding

This lesson is part of Vibe Coding.

Unlock this course →Already bought it? Log in

Securing the email API with a secret

3:43

Claude flags the security hole itself: anyone with the URL could send email as you. Script properties, a shared secret, and Wrangler-managed secrets — without writing code.

Transcript preview

Okay guys, so there is a very security thing which Claude is trying to help us with. This URL should not be something which any, so using this URL anyone can send email from our name. So we need to have a secret so that this can be safely used and say script properties. This should be safely used. So now since I have specified a value this should not be exposed like this but the point is because of the secret this API will only work when I provided the secret, right? Sometimes it's just blabbers I'm kind of done with that. It's a very good practice I personally feel to close especially looking at I have so many terminals some lecturing doing less of it I highly recommend whenever you are done with something because the code changes and the things it was supposed to work on was already done right so that was that's the reason why I felt comfortable now you see the secrets and everything these are being set up using the Wrangler API which is basically by CloudFlare so that you don't have to kind of do these things manually. Let's give it a more time okay so it's saying the secrets are set what happens is because I closed that that terminal it was running the build right so if I click on this app now it shows this error you can read now so we need to run this again but what I'm going to do is so it was not only just setting it up it was even setting that up so the Chrome

The full lesson — video and transcript — is part of Vibe Coding.

Get Vibe Coding