Skip to main content
Question

Hide apptoken on formula rich text button using ?a=API_EditRecord

Hi,
When using an app token and a button (e.g. ?a=API_EditRecord), how do you stop the app token displaying when someone views the source code on chrome?
Thanks
    This topic has been closed for replies.

    Theres no reason to worry about anyone seeing it, the app token only allows a user to view/edit what they have permission too :)
    But if you truely worry avoid an API call for no reason, take Dan Diebolt's example linked belo for using FormData

    https://haversineconsulting.quickbase.com/db/bgcwm2m4g?a=dr&rid=594&_ga=2.46583205.30083185.1535698739-556233741.1535475745


    I might add that you can't hide anything from a user who examines the source code. All HTML, CSS and JavaScript is visible. You can make it more difficult for a casual user to see portions of the source code but the best you can do is obfuscate things.
    Terms & ConditionsAccessibility statement