HttpService Secrets in Studio?

Help and Feedback Scripting Support
,
#1

I am trying to access my secrets through Studio, I am aware that I can just turn on Team Create and the secrets will work. I want to use the secrets that I put inside Game Settings Secrets. I am not sure what is the format though.

Things that have shown signs of working is putting the secret in this format:

image
image956Ă—626 45.4 KB

The problem with this is that when I am using the GetSecret method and about to make a request, I get the error that the secret can not be used for the domain, and this makes sense because I never specified it.
image

What am I supposed to put and in what format?

1 Like
#2

That will surely help you.

#3

Sorry, but that did not help at all. The Wiki page does not reference how to format Secrets in Roblox Studio Game Settings.

I would like to clarify again, I know how to set up Secrets in the Creator Hub. I would like to set them up directly in my local environment though.

Thank you.

#4

Sometimes your secrets can be restricted to particular domains or services for security reasons. So it may not be an error on your end since as long as you are using :GetSecret with the correct name there isn’t any issue with the environment

#5

I understand that, but if I wanted to test in Roblox Studio, I would have to either do Team Test every time or expose the Secret directly inside the code, and if I forget then it might be game over.

Do you know what else I can do?

#6

You can use mock secret systems or environment flags to simulate secrets in a local environment

#7

try using this format:

for the domain value you can just do wildcard “*” for the simplest unrestricted usage of the secret.

a related question: i am a solo dev so i have not yet had a chance to test this, but do these Game Settings > Security Secrets get saved for other devs associated with the game?

if all devs can see these Secrets and granular access to the secrets is a requirement, i guess we we can consider using a local .env file and write a module to parse it using the command bar.

-- FileLoader
local StudioService = game:GetService("StudioService")

local function loadFile()
	local selected = StudioService:PromptImportFile({"txt"})

	if selected then
		print(selected:GetBinaryContents()) -- update logic here to parse into local secrets
	else
		print("No file selected.")
	end
end

return loadFile

Then wrap your HttpService:GetSecret(key) calls in a pcall, and if it fails use the local value if provided, otherwise default to a idempotent mock.