Angular where to store API keys: frontend vs backend

Nowhere in your Angular bundle. Anything shipped to the browser is public, so store only publishable keys client-side and keep secret keys on your backend behind a proxy or BFF, injected at build or r