Security and naming conventions are def the big ones for Domain:port/api.
For auth, OAuth 2.0 is worth looking into. It’s a bit more work but way more secure than basic auth.
And yeah, docs are a must. I use Redoc for generating clean, readable API docs.
For auth, OAuth 2.0 is worth looking into. It’s a bit more work but way more secure than basic auth.
And yeah, docs are a must. I use Redoc for generating clean, readable API docs.
