store api key outside atom config file

[alanhamlett]

because submitting traceback automatically includes secret api key in public github issue.

[albertosantini]

and we cannot commit the settings to a public repo to sync the preferences.

Update: for instance in ~/.wakatime.cfg

[alanhamlett]

I was going to move the api key from atom config into ~/.wakatime.cfg. Do you store your ~/.wakatime.cfg file on a public repo?

[albertosantini]

No. dotfiles containing sensible info are not synced and it is a fair decision.

[alanhamlett]

Still need to prevent api keys from being stored in the Atom config file, even if it's read from ~/.wakatime.cfg by default.

[albertosantini]

With 5.0.1 I removed api key from the atom settings, using the key stored in ~/.wakatime.cfg.

For me it would be enough to add a text in the atom settings, warning the api key would be stored in atom config file.

Likely https://github.com/wakatime/atom-wakatime/blob/master/lib/wakatime.coffee#L28

Your secret key from https://wakatime.com/settings. Be aware, if filled, it is stored in config file.

Edit: Then you may close the issue. :)