For documentation see MODULARIZATION.md. You should not expose these access tokens in publicly-accessible source code where unauthorized users might find them. Instead, you should store them somewhere ...

Storing configuration in the environment is one of the tenets of a twelve-factor app. Anything that is likely to change between deployment environments–such as resource handles for databases or ...