title: Security: Can I locally change (for example in chrome) a .env variable, a react state or a redux state?
body: <p>This question is eating my soul since I've started coding in react. </p>
  
  <p>Can we do that kind of stuff?</p>
  
  <p>Let's say that I set my NODE_ENV in my local chrome session to "development" and... boom! I'm a superadmin in several apps </p>
  
  <p>Or I set the state IS_AUTHED to "yay, i'm authed let me in"</p>
  
  <p>Ok, I guess this one does not work with JWT and other auth systems, but I'm sure several react apps out there have just a state in redux or react storing the auth status. I'm scared. I code with a shadow behind me telling me states and env variables are dangerous.</p>
  
  <p>Thank you guys!</p>
  
  <p>EDITED:
  So yes, you can edit react or redux variables on the go, and it will clearly impact the front. </p>
  
  <p>But if the app is well-designed and you don't have sensitive information in the front code you should be OK. This means that every sensitive data must come from  authed connections to the server) </p>
  
  <p>No idea regarding modifying env variables like NODE_ENV or how to do it but same idea: you should be safe id you don't write sensitive data behind a "NODE_ENV="development" condition</p>