Security Concern

[cayter]

According to https://axiom.co/docs/send-data/nextjs, we have to:

1. Create an API token in Axiom with permissions to create, read, update, and delete datasets.
2. Configure NEXT_PUBLIC_AXIOM_DATASET and NEXT_PUBLIC_AXIOM_TOKEN to the API token from step 1.

Doesn't NEXT_PUBLIC_ expose the secrets in the browser which also means our logs can be CRUD by malicious users?

[dasfmi]

hi @cayter, that's a mistake in the docs, you only need an ingest permission, I will update the docs. Nonetheless, your're right regarding leaking the token, we have an in progress PR to make the library send logs through the backend only.

[cayter]

Oh noted thx a lot!