Private and public API Key to build browser client apps

[KarmaLaundry]

Hello everyone, and forgive me for my poor cybersecurity knowledge.

To my understanding the only possible way to invoke the chat completion API without compromise the API key is from a server backend.
Is there a way to build an application that make calls to OpenAi APIs completely on the browser without making public the API key?

I wonder why there isn’t an authentication method with something like private and public key or some sort of encryption.
That would be extremely useful because it would allow many applications like chatbots to run directly in the browser, without the costs and latency of a server backend.

[anon22939549]

@KarmaLaundry

Is there a way to build an application that make calls to OpenAi APIs completely on the browser without making public the API key?

No.

[grandell1234]

@KarmaLaundry

I wonder why there isn’t an authentication method with something like private and public key or some sort of encryption.

You mentioned you weren’t a cyber security expert so the reason is that if it’s all in the browser someone who still be able to view the private key making it just harder to use it then a regular key.