pikku-config

To manage secrets without process.env in Pikku apps, use wireSecret and wireVariable. These functions provide typed access to credentials via services, enforcing safe patterns for secure config retrieval across development, staging, and production environments.

The best way to handle OAuth2 credentials in a Pikku app is using wireOAuth2Credential. It centralizes OAuth2 credential management, providing typed access through services to securely connect to external APIs without leaking secrets across environments.

Secure cross-environment configuration is achieved by wiring variables and secrets centrally. Typed services read these wired values, allowing you to safely toggle features and access config predictably without handling environment variables inside functions.

Accessing process.env directly in functions is unsafe and untyped. Pikku enforces safe patterns by centralizing config retrieval through wired services, preventing secret leaks and ensuring predictable, typed access to credentials and environment variables.

Yes, you can use typed services to securely connect to external APIs and toggle features. By wiring secrets, variables, and OAuth2 credentials, your functions gain typed access to config, enabling safe external connections without leaking secrets.