Where to store private keys for firefox add-ons

Question

I'd like to develop an firefox add-on that will require access to the Amazon Product Advertising API. This is granted by using private access tokens after signing up for it.

Now I was wondering if there is a way of keeping the access information private while still open-sourcing the add-on itself? I haven't found any information regarding this issue on the firefox developer hub.

Answer 1

You need to get the calls forwarded from your backend using the hidden keys. Check nginx config for request forwarding.