Where to store secret keys when using Polymer + Firebase?
<p>I'm developing a web application using Polymer + Firebase. In my app, I'm trying to integrate it to Slack. In order to obtain an access token from Slack, I need to make an api call to Slack with the client secret key (generated by Slack).</p>

<p>The question is, where/how should I store this client secret key? Hardcoding this key in my Polymer app sure sounds like a big security no no.</p>

<p>Thanks.</p>