[R-pkg-devel] Keeping secrets in R packages

[Duncan Murdoch]

On 05/06/2015 6:19 PM, Neal Fultz wrote:
> I am working on updating the RGoogleDocs package to use OAuth2, since the
> old api was recently turned off (at my job we use it as a poor mans
> database).
> 
> As part of the auth process, I need to send google a client key and secret
> in order to gain access to a spreadsheet. Is there a 'safe' place to store
> the secret?
> I would strongly prefer not requiring my end users to have to sign up for
> their own google API keys, but I also do not want to store the secret in
> the clear.
> 
> Any suggestions on best practices?

I don't think there is any way to do this.  You could tell people that
you will email the key on request, but there's no way to tell them
something without telling them.

Duncan Murdoch