31:[{"id":"133898e52226c124f72825c044257989fe537008c8cb9923809f1a3364c4fdfee1426596e8e9bbd9673ec893f5150d6b7582854da8d8d550eaa5b9b3633db6ab","href":"https://static.observableusercontent.com/files/133898e52226c124f72825c044257989fe537008c8cb9923809f1a3364c4fdfee1426596e8e9bbd9673ec893f5150d6b7582854da8d8d550eaa5b9b3633db6ab","name":"image.png","type":"image/png","lastModified":1572544212730.294,"size":124159},{"id":"26de237d8d618adb29ec72b111e36e3b85b813d3b2da1640dd1227b0552b16b77cc32050d004b18b577353062a07e47dbcf643147139fe3e921e140db5c9e65e","href":"https://static.observableusercontent.com/files/26de237d8d618adb29ec72b111e36e3b85b813d3b2da1640dd1227b0552b16b77cc32050d004b18b577353062a07e47dbcf643147139fe3e921e140db5c9e65e","name":"secrets.png","type":"image/png","lastModified":1643848598346.788,"size":192416}] 2f:{"title":"Introduction to secrets","cells":[{"id":180,"value":"# Introduction to secrets","pinned":false,"hidden":false,"mode":"md"},{"id":179,"value":"$${pro()}","pinned":false,"hidden":false,"mode":"md"},{"id":0,"value":"Observable is a collaborative programming environment—for reading, sharing, forking, importing—but it’s also for private work. The **Secrets** feature makes it easier to securely access private data and APIs on Observable. This feature lets you analyze or visualize private data while keeping your secrets, well, *secret*.\n\nSecrets are name-value pairs, similar to environment variables, that you can specify [in your settings](/settings/secrets). \n\nYou can also choose whether to share each secret with members of **[Groups](https://observablehq.com/@observablehq/workspace-settings#cell-145)** or guest roles in your organization via the __Allow guest access__ option when creating or updating a secret. Secrets are always unshared with guests by default.","pinned":false,"hidden":false,"mode":"md"},{"id":184,"value":"secretNote1 = note(htl.html`Note: Guest users have access to any secret enabled with Allow guest access. Access is not governed by the notebooks shared with them.`)","pinned":false,"hidden":false,"mode":"ojs"},{"id":172,"value":"html`\n

\n \n

The Secrets page under Settings.

\n\n`","pinned":false,"hidden":false,"mode":"ojs"},{"id":167,"value":"For example, say you want to talk to the Cloudflare API. Add a secret named \\`CLOUDFLARE_API_KEY\\` whose value is your API key (here \\`0123456789abcdef\\`, which for obvious reasons is not a real key). To access your key from a notebook, say:","pinned":false,"hidden":false,"mode":"md"},{"id":27,"value":"Secret(\"CLOUDFLARE_API_KEY\")","pinned":true,"hidden":false,"mode":"ojs"},{"id":50,"value":"md`The \\`Secret\\` function takes a single argument, the *name* of the secret, and returns the *value* of the corresponding secret if it exists. If the secret doesn’t exist, then the \\`Secret\\` function instead throws an error.`","pinned":false,"hidden":false,"mode":"ojs"},{"id":55,"value":"Secret(\"DOES_NOT_EXIST\")","pinned":true,"hidden":false,"mode":"ojs"},{"id":59,"value":"md`Only your private notebooks (which are only readable by you) can access your secrets—that’s why they’re secret! If you share or publish a notebook, it won’t be able to access secrets: any cell that references the \\`Secret\\` function will error.\n\nYou must explicitly grant permission for a notebook to access your secrets. The first time you ask for a secret from your private notebook, you’ll see a confirmation dialog asking for permission to access your secrets. This extra step protects you when you fork or import someone else’s notebook into your private notebook. If you don’t trust the code, don’t give it your secrets!`","pinned":false,"hidden":false,"mode":"ojs"},{"id":30,"value":"md`---\n\n## Appendix`","pinned":false,"hidden":false,"mode":"ojs"},{"id":32,"value":"// This is for demonstration purposes! In a real notebook, you’d use the\n// built-in Secret function rather than defining your own, so that you\n// avoid storing your secret values in notebook code.\nfunction Secret(name) {\n switch (name) {\n case \"CLOUDFLARE_API_KEY\": return \"0123456789abcdef\";\n default: throw new Error(\"secret not found\");\n }\n}","pinned":false,"hidden":false,"mode":"ojs"},{"id":177,"value":"import {pro} from \"@observablehq/pro-tag\"","pinned":false,"hidden":false,"mode":"ojs"},{"id":183,"value":"import {note} from \"@observablehq/callout-boxes\"","pinned":true,"hidden":false,"mode":"ojs"}],"files":"$W31","stdlib":"1","titling":"auto"}