Thanx for pointing that out!

But as far as I know there is no way you can secure/hide code in front-end.

So you have to maintain a server and supply the secrets from there otherwise I don't know any way of doing it securely.

Please correct me if I am wrong.