Configuration for spfx Command Set

[anisiaalexandra]

Hi community,

I am looking for idea to store configuration for a Command Set. I want to store clientId and clientSecret of an API we are going to call on click.
We have thought of using the approach discussed here https://github.com/pnp/sp-dev-fx-webparts/tree/main/samples/react-app-settings but I am afraid that it might by accessible by malicious people. We have also though of saving the configuration somewhere and access it via another service, to make sure only people within the company can access it. But this would add call, so it would decrease performance.

Any idea or comment is highly appreciated.

Kind regards,
Anisia Pop