Security is def a big deal when it comes to Domain:port/api setups. I’d recommend looking into tools like OWASP ZAP for testing vulnerabilities. Also, using something like Cloudflare can help with rate limiting and DDoS protection.
For naming conventions, RESTful API design principles are your friend. Stick to /api/v1/resource-style endpoints, and avoid anything too cryptic.
And yeah, documentation is key. Swagger or Postman can make your life way easier for both creating and sharing docs.
For naming conventions, RESTful API design principles are your friend. Stick to /api/v1/resource-style endpoints, and avoid anything too cryptic.
And yeah, documentation is key. Swagger or Postman can make your life way easier for both creating and sharing docs.