Use API key instead of clientSecret

As recently discovered we send the clientSecret to the webclient which
is potentionally dangerous. This patch should fix the problem and
replace the clientSecret with the originally intended and correct way to
implement it using the API key.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

1 files changed, 1 insertions, 1 deletions

diff --git a/app.js b/app.js
index fcf905d5..63b880c7 100644
--- a/app.js
+++ b/app.js
@@ -33,7 +33,7 @@ var data = {
   urlpath: config.urlPath,
   debug: config.debug,
   version: config.version,
-  GOOGLE_API_KEY: config.google.clientSecret,
+  GOOGLE_API_KEY: config.google.apiKey,
   GOOGLE_CLIENT_ID: config.google.clientID,
   DROPBOX_APP_KEY: config.dropbox.appKey,
   allowedUploadMimeTypes: config.allowedUploadMimeTypes