Where to put tokens for private datasets in Sanity.io

Can anyone point me in the direction of where tokens go for private datasets please?

Can you clarify what you mean by "where tokens go"? Do you mean safely storing them for use, how you generate them or how you use them?

Sorry, I should have explained better.
I have a private dataset and I have generated a token already and have that saved. I don’t know where I have to put this token in order for the frontend to read from sanity / studio.

I basically get “nothing was found from siteSettings” because the token has not been added and thus allowing localhost to read the data.

Does that make sense?

No worries 🙂
You need to give the token to the client you are using to communicate with Sanity. I.e.: for the JavaScript client you must pass it to the creator function as described here using the

token

property: https://www.sanity.io/docs/js-client#api
If you are using Gatsby or some other framework there may be other locations (e.g.:
https://www.sanity.io/docs/gatsby-source-plugin#install )
Note that you may want to avoid passing the token to the front-end directly as it will be easily readable by anyone who visits your page. For such cases I've been using a proxy server that expose only certain endpoints. It then translates these into GROQ queries and uses its own client with the token to make requests. It's a bit more complex to set up, but you avoid sharing your token with the world.

e.g.: Front-end -> GET
myproxy.com/posts -> Proxy GROQ -> Sanity

Ref: https://www.sanity.io/docs/keeping-your-data-safe#tokens-in-browser-side-javascript-e2a77f7391df

Awesome, thanks for those. I will read through them and try to get it all wired up!

Hi User. If you haven’t seen this already, please also check out https://www.sanity.io/docs/http-auth#securing-your-api-token-504058b73b71 .
Also, thank you for providing some great links,
.

All sorted now thank you, the answer was staring me in the face this whole time 😂