api security

Author: Imamabdulfatah

lib/core/services/openai_service.dart

@@ -1,12 +1,11 @@
 import 'dart:convert';
 
 import 'package:http/http.dart' as http;
+import 'package:flutter_dotenv/flutter_dotenv.dart';
 
 class OpenAIService {
-  // PENTING: Sebaiknya API Key tidak dismpan hardcode di sini, tapi di .env
-  // Namun untuk refactor ini kita ikuti existing code.
-  static const String _apiKey =
-      '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';
+  // Load API key from .env (flutter_dotenv). Do NOT hardcode.
+  String get _apiKey => dotenv.env['OPENAI_API_KEY'] ?? '';
   static const String _baseUrl = 'https://api.openai.com/v1/chat/completions';
 
   Future<String?> describeImage(String base64Image,

pubspec.lock

@@ -270,6 +270,14 @@ packages:
       url: "https://pub.dev"
     source: hosted
     version: "1.1.9+2"
+  flutter_dotenv:
+    dependency: "direct main"
+    description:
+      name: flutter_dotenv
+      sha256: b7c7be5cd9f6ef7a78429cabd2774d3c4af50e79cb2b7593e3d5d763ef95c61b
+      url: "https://pub.dev"
+    source: hosted
+    version: "5.2.1"
   flutter_launcher_icons:
     dependency: "direct dev"
     description:
@@ -385,7 +393,7 @@ packages:
     source: hosted
     version: "0.2.5"
   http:
-    dependency: "direct main"
+    dependency: transitive
     description:
       name: http
       sha256: "5895291c13fa8a3bd82e76d5627f69e0d85ca6a30dcac95c4ea19a5d555879c2"

pubspec.yaml

@@ -20,6 +20,8 @@ version: 1.0.0+1
 
 environment:
   sdk: ^3.6.0
+  http: ^0.13.6
+  flutter_dotenv: ^5.1.0.0
 
 # Dependencies specify other packages that your package needs in order to work.
 # To automatically upgrade your package dependencies to the latest versions
@@ -36,7 +38,7 @@ dependencies:
   cupertino_icons: ^1.0.8
   camera: ^0.10.6
   image_picker: ^1.0.4
-  http: ^0.13.6
+  flutter_dotenv: ^5.1.0
   path_provider: ^2.1.2
   path: ^1.9.0
   usb_serial: ^0.5.2