API keys best practices notes

Always put API keys in request headers Always put API keys in request headers. Then they're not visible in browser history, logs, etc: fetch("https://api.carta.com/data", { headers: { Authorization: `Bearer ${apiKey}`, "Content-Type": "appl...