Keeping Secrets

< The Problem

You want to keep secrets like API access tokens outside of your source code. This is considered a good engineering practice in general ( least privilege ) and you may want to have different environments like staging and production.

< The answer

CocoaPods Keys adds a few commands, and uses the installation hooks:

• bundle exec pod keys set ARKeyName value - lets you store a value in your computer's keychain
• bundle exec pod keys get ARKeyName - prints out the value from your computer's keychain

Then inside your Podfile , add the plugin section. Noting the name of the project , the target to attach the pod to, and the keys that you want to use:

plugin
 'cocoapods-keys'
,

       project: 
'Artsy'
,

       target: 
'Artsy'
,

       keys: 
[

         'ArtsyAPIClientSecret'
,
      # Auth for the Artsy API

         'ArtsyAPIClientKey'
,
         #

         'ArtsyFacebookAppID'
,
        # Supporting FB Login

       ]