Best Practices

Token Management:

Refresh tokens before they expire (within 5 minutes of expiration)

Store tokens securely (httpOnly cookies or secure storage)

Clear tokens immediately on logout

Never log tokens in console or error messages

API Usage:

Use pagination for large datasets

Implement caching for frequently accessed data

Use appropriate HTTP methods (GET, POST, PUT, DELETE)

Include proper error handling and retries

Performance:

Batch requests when possible

Use query parameters for filtering instead of client-side filtering

Implement request debouncing for search operations

Cache static data (industries, ad sources, tags)

Security:

Always use HTTPS in production

Validate and sanitize user input

Implement CORS restrictions

Monitor for suspicious activity

Monitoring:

Log all API errors with request IDs

Track API response times

Monitor token refresh failures

Set up alerts for 5xx errors