显示 sso 密钥是安全问题吗？

Question

I realized that when we access the URL https://cdns.gigya.com/js/gigya.js?apikey=MY_API_KEY

A SSO KEY is shown, along with baseDomains

Are these values something an attacker can exploit?

Thanks.

Answer 1

答案必须是三十个字符：答案是“否”。

Answer 2

Gigya API keys are public keys. An attacker can not do anything with the Gigya API keys because even in the case of trying to use them in a Frontend, it won't work because of the domain must be allow-listed in Gigya.