Best Practices

Recommendations for integrating against Storentia reliably.

• Check success before reading data on every REST response.
• Handle 429 with exponential backoff.
• Log request_idalongside failures — it's the fastest way to get support to the right log line.

• Use public tokens client-side, OAuth app secrets server-side only.
• One OAuth app per integration, not one shared across many.
• Revoke a public token the moment an integration is retired.

• Never commit a client_secret or personal access token to version control.
• Revoke sessions from devices you no longer recognize.
• Rotate OAuth app secrets on a schedule, not just after a suspected leak.