Welcome to the RingCentral Community

Make sure to review our Terms of Use and Community Guidelines.

Please note the community is currently under maintenance and is read-only.

Home » Developers

WebRTC Security Issue

Tags: rest api

May 4, 2022 at 7:40am • 1 replies • 0 likes

Smit Shah

I am looking at the tutorial on github at url https://github.com/ringcentral-tutorials/getting-started-with-webrtc-js-demo

I would like to implement this, however the problem I have is that it requires the app's client id and secret to be passed to javascript to be able to use.

How do I make it so it runs on a TOKEN that I get from some backend API and not expose my app's sensitive data.

1 Answer

Suyash Joshi answered on May 5, 2022 at 9:50am

Do you need to have users login to RingCentral on the front end ? If not, I would recommend using JWT based Authentication that way you don't expose username/password in the code base, only JWT token that you can restrict to a particular app.

Phong Vu answered on May 4, 2022 at 8:45am

Check out the new way to authenticate using PKCE. Fully agree with you that it is not secured to expose both client id and client secret on the frontend code. I will notify the team to work on changing example using PKCE method.

A new Community is coming to RingCentral!

Posts are currently read-only as we transition into our new platform.

We thank you for your patience
during this downtime.

Try Workflow Builder

Did you know you can easily automate tasks like responding to SMS, team messages, and more? Plus it's included with RingCentral Video and RingEX plans!

Try RingCentral Workflow Builder

PRODUCTS
RingEX
Message
Video
Phone

OPEN ECOSYSTEM
Developer Platform
APIs
Integrated Apps
App Gallery
Developer support
Games and rewards

RESOURCES
Resource center
Blog
Product Releases
Accessibility

QUICK LINKS
App Download
RingCentral App login
Admin Portal Login
Contact Sales