Merge pull request #107 from Shopify/ellul/gitignore-very-important

Put emphasis on having .env in gitignore + add resource to rotate credentials
Shopify · Feb 10, 2021 · 7b63efe · 7b63efe
2 parents 8627013 + deae0c1
commit 7b63efe
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -18,6 +18,7 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 - Webhooks types are now exported outside the library [#91](https://github.com/shopify/shopify-node-api/pull/91)
 - Added support for private apps [#99](https://github.com/Shopify/shopify-node-api/pull/99)
 - `USER_AGENT_PREFIX` added to Context, to add agent to all requests [#101](https://github.com/Shopify/shopify-node-api/pull/101)
+- Add link to tutorial on how to rotate credentials if neccesary [#107](https://github.com/Shopify/shopify-node-api/pull/107)
 
 ### Fixed
 

diff --git a/docs/getting_started.md b/docs/getting_started.md
@@ -45,13 +45,16 @@ src/
   index.ts
 ```
 
-If your application is in a Git repository, you should make sure to add these files to `.gitignore`:
+If your application is in a Git repository, you should **make sure to add these files to `.gitignore`**.
+
 ```
 .env
 dist
 node_modules
 ```
 
+ **Important:** If you ever accidentally commit your API secret to GitHub or any other third party, you can follow [this tutorial](https://shopify.dev/tutorials/rotate-revoke-api-credentials) on how to generate new credentials for your application.
+
 `tsconfig.json`
 ```json
 {