secure way to setup google auth client key

[SOunit]

path

client/src/components/googleAuth/GoogleAuth.tsx
client/src/util/keys.ts

point to fix

client id is in react.
any user can see it.
is this bad?
or is this ok because there's access limitation in google platform?
(only by "http://localhost:3000" now)

solution

use backend and proxy to hide client key from users

ref

• same issues on other repo
  security of google auth client key modern_react_with_redux#4

tried ( not recommended )

• add environment variable docker-compose file
• add environment variable to react