# Balena Dash Chromium Kiosk Mode Env Variables **URL:** \ **Category:** balenaOS\ **Tags:** raspberrypi3\ **Created:** [September 25, 2020, 1:16pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538 "2020-09-25T13:16:13Z")\ **Posts on this page:** 8\ **Page:** 1
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 25, 2020, 1:16pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/1 "2020-09-25T13:16:13Z")
Hello, I am trying to securely authenticate my balena kiosks running chromium with my backend upon start-up Is there any way for me to inject an API key/auth token through balena cloud into my chromium instance? Thanks ---
**Author:** ![thgreasi](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/thgreasi/32/454_2.png) [@thgreasi](https://forums.balena.io/u/thgreasi)\ **Post date:** [September 25, 2020, 1:43pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/5 "2020-09-25T13:43:44Z")
Hi Patrick, You can probably pass them as environment variables to your application. So you can probably add them manually through the balenaCloud dashboard. You can specify the variables to apply to all the devices of your application, or specify a different one for each device. By using service variables or device service variables you can even limit the variable being available to just a single container. Let me point you to our respective balenaCloud dashboard and CLI docs: > **[Environment and service variables - Balena Documentation](https://www.balena.io/docs/learn/manage/serv-vars/#device-environment-and-service-variables)** > **[Balena CLI Documentation - Balena Documentation](https://www.balena.io/docs/reference/balena-cli/#env-add-name-value)** If you would prefer a programmatic API then you can use the respective balena-SDK methods and setup a service on your side that interacts with the balena-api and sets your API keys to the respective device. Let me also point you to the respective docs for the SDK methods: > **[Balena Node.js SDK - Balena Documentation](https://www.balena.io/docs/reference/sdk/node-sdk/#balena.models.device.envVar.set)** Kind regards, Thodoris ---
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 25, 2020, 2:00pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/7 "2020-09-25T14:00:10Z")
Thanks @thgreasi Would there be any way for me to inject this ENV variable into the Chromium instance, i.e into its cookies? ---
**Author:** ![thgreasi](https://sea2.discourse-cdn.com/balena/user_avatar/forums.balena.io/thgreasi/32/454_2.png) [@thgreasi](https://forums.balena.io/u/thgreasi)\ **Post date:** [September 25, 2020, 2:26pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/8 "2020-09-25T14:26:50Z")
Hi again Patrick. Environment variables defined with the above methods get injected to the environment of the container. For example you can see a list of all available variables by SSHing to the container and run `env`. An alternative way that sounds it would better match your use case (please further expand if it doesn’t) is to use the HTTP API that the supervisor exposes to the internal network of the devices. In that case your app (eg a webapp running in chromium) can do a http request to the supervisor to retrieve more information about the application and its env vars. Let me point you to the respective docs: > **[Interacting with the balena Supervisor - Balena Documentation](https://www.balena.io/docs/reference/supervisor/supervisor-api/#interacting-with-the-balena-supervisor)** If this doesn’t work for you web app, you might better consider having a simple node web server running on a known port and responding with the subset of ENVs that the chromium instance needs to know. This way your chromium instance can do an HTTP request to that known port instead of having to use the supervisor API directly. This also leads to better isolation and gives more controlled of what gets exposed to the chromium instance. Let me point you to an example of a multicontainer application: > **[balena-io-examples/multicontainer-getting-started](https://github.com/balena-io-examples/multicontainer-getting-started)** > > Get up and running quickly with a multicontainer setup on balena - balena-io-examples/multicontainer-getting-started Kind regards, Thodoris ---
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 25, 2020, 3:35pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/10 "2020-09-25T15:35:55Z")
Thanks @thgreasi I think the supervisor API is just what I need, I will report on this thread if I figure it out 👍 ---
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 26, 2020, 2:50pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/12 "2020-09-26T14:50:35Z")
@thgreasi, I am still having some trouble with this: I can get the following working in my Kiosk container: `curl "$BALENA_SUPERVISOR_ADDRESS/v2/local/target-state/?apikey=$BALENA_SUPERVISOR_API_KEY"` However a fetch request from the chromium instance web app: ` fetch('http://127.0.0.1:48484/v2/local/target-state/?apikey=${BALENA_SUPERVISOR_API_KEY}', { method: 'GET', headers: { 'Content-Type': 'application/json' } })` Returns only the following: `GET,HEAD,POST` Here are the resposne headers: `Allow: GET,HEAD,POST Connnection: Keep-alive Content-lenght: 13 Content-Type: text/html` Any idea why this is now working? ---
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 26, 2020, 2:52pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/13 "2020-09-26T14:52:57Z")
To give more context, I am running a web app on my local network which can be accessed at [http://192.168.0.45:3001/](http://192.168.0.45:3001/) When the balena starts up it’s url is injected with the API key: [http://192.168.0.45:3001/?apiKey=123123123123](http://192.168.0.45:3001/?apiKey=123123123123) I then use that key to perform the authentication request and clear the key from the URL ---
**Author:** ![PatrickEntabeni](https://avatars.discourse-cdn.com/v4/letter/p/da6949/32.png) [@PatrickEntabeni](https://forums.balena.io/u/PatrickEntabeni)\ **Post date:** [September 28, 2020, 1:44pm UTC](https://forums.balena.io/t/balena-dash-chromium-kiosk-mode-env-variables/193538/14 "2020-09-28T13:44:53Z")
Another bit of information, I have tried using HTTP and HTTPS