Hello all,
I've finally managed to authorize succesfully with MusicKit. However, I'm not sure which kind of data I'm supposed to pass "in the open" and which should be "hidden". For example, the `developerToken` I'm obtaining from a python server-side script. I'm passing it via an Ajax call, is it safe?
Which tokens/identifiers should I keep "secret"? only my private keys?
document.addEventListener('musickitloaded', function() {
// MusicKit global is now defined
console.log("Hello!");
MusicKit.configure({
developerToken: '', // here I'm entering the token returned from the JWT (decoded)
app: {
name: 'MyAppName',
build: '1'
}
});
let music = MusicKit.getInstance();
music.authorize();
});