Developer portal · developer-portal §6.1
Secret reveal
Shows a new client secret, API key or webhook secret exactly once.
Code
<SecretReveal kind="client_secret" secret={revealed} envContext={ctx} onDone={() => setRevealed(null)} t={t} />Accessibility
- Focus is trapped; Escape and the backdrop do not close it until the confirmation is ticked.
- Copy is announced politely ("Copied").
- The value is masked by default except its prefix and last four characters.
Usage
Do
- Show it once, from the action response only.
- Offer Copy and a browser-built .env download.
Don't
- Never keep the value in state after Done, a URL, a log or a query.
- Never offer to show it again: rotate instead.
Platforms
- Web
- iOS
- Web only (no native developer portal)
- Android
- Web only (no native developer portal)