How do I use the supabase API-key in the safest way possible?

Hi everyone,

I am doing an expo app with my database in Supabase. I don't want to expose my supabase-url and anon-key directly in the code, as in the documentation example below.

https://preview.redd.it/wtz0cfqmjwge1.png?width=896&format=png&auto=webp&s=b3468dd77a9af653eba6b0c3969cbb31b0d4b48d

Instead, I want to store the url and anon key in an azure key vault. But, in order to access the key vault secrets, I need to authenticate the app for azure. But as this app is not deployed in azure, it can't automatically authenticate itself. Should I use supabase edge functions to make the call instead? is it safer to put my authentication credentials in a function there?