Skip to main content
WIP — This guide is being updated to reflect the latest OS workflows.

Principles

  • Do not expose backend endpoints in frontend code
  • Use SSR/edge routes to forward authenticated calls
  • Keep secrets in server-only env vars

Next.js Example

WebSocket Proxy Notes

  • Terminate WS at the server and relay authorized events to clients
  • Avoid direct browser → backend WS when auth/secrets are involved