Yo, I feel you on the security part. Bots are ruthless.
For Domain:port/api, I’d suggest using JWT for auth instead of basic auth. It’s more secure and scalable.
And yeah, naming conventions matter. Keep it simple and consistent. Tools like Stoplight can help you design and document your API properly.
For Domain:port/api, I’d suggest using JWT for auth instead of basic auth. It’s more secure and scalable.
And yeah, naming conventions matter. Keep it simple and consistent. Tools like Stoplight can help you design and document your API properly.
