# firebase app check

Published articles for firebase app check.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Why You Should Never Embed Your Gemini API Key in Client Code (And How Firebase AI Logic Fixes It)

DevFeed: [Why You Should Never Embed Your Gemini API Key in Client Code (And How Firebase AI Logic Fixes It)](<https://devfeed.tech/articles/why-you-should-never-embed-your-gemini-api-key-in-client-code-and-how-firebase-ai-logic-fixes-it-57515.md>)

Original publisher: [Read original article](<https://www.freecodecamp.org/news/why-you-should-never-embed-your-gemini-api-key-in-client-code-and-how-firebase-ai-logic-fixes-it/>)

Author: Caleb Mintoumba

Published: 2026-09-21T11:58:11Z

Content type: tutorial

Language: en

Sources: [Free Code Camp](<https://devfeed.tech/sources/freecodecamp-programming-tutorials-python-javascript-git-more.md>)

Topics: [Artificial Intelligence](<https://devfeed.tech/topics/ai.md>), [API keys](<https://devfeed.tech/topics/api-keys.md>), [firebase-ai-logic](<https://devfeed.tech/topics/firebase-ai-logic.md>), [Security](<https://devfeed.tech/topics/security.md>), [Firebase](<https://devfeed.tech/topics/firebase.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [browser](<https://devfeed.tech/topics/browser.md>), [Web](<https://devfeed.tech/topics/web.md>)

Tags: [ai](<https://devfeed.tech/tags/ai.md>), [ai-logic](<https://devfeed.tech/tags/ai-logic.md>), [api-keys](<https://devfeed.tech/tags/api-keys.md>), [architecture](<https://devfeed.tech/tags/architecture.md>), [developers](<https://devfeed.tech/tags/developers.md>), [firebase](<https://devfeed.tech/tags/firebase.md>), [firebase-ai-logic](<https://devfeed.tech/tags/firebase-ai-logic.md>), [firebase-app-check](<https://devfeed.tech/tags/firebase-app-check.md>), [gemini](<https://devfeed.tech/tags/gemini.md>)

### AI overview

A tutorial for web developers on the security risks of embedding Gemini API keys in browser code. It explains how Firebase AI Logic uses a proxy architecture and how Firebase App Check addresses an additional protection gap, with coverage of client setup, streaming, multi-turn chat, and structured JSON output.

### Source excerpt

The explosion of generative AI has pushed thousands of web developers to add intelligent features to their apps. The first instinct is usually to call the Gemini API's SDK directly from the browser. T