I have a question about isomorphic app(like next.js or sapper), it is usually compiled as two bundles(one for client, another one for server) with Webpack or Rollup, Then starting the server by running the bundle.
But are those bundles expose the business logic?
I wanna import my API secret key inside backend or hashing the user password, but will it be bundled into the client.bundle.js?