You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/troubleshooting/api/api_charset_and_encoding_fix_guide.md
+2-2Lines changed: 2 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -11,7 +11,7 @@ This guide shows you how to resolve such issues and ensure your API outputs are
11
11
12
12
Follow the steps below:
13
13
14
-
-**Set Proper Request Headers**
14
+
1.**Set Proper Request Headers**
15
15
16
16
Make sure your API call includes the appropriate headers to instruct the server on how to format the response. Add the following headers to your API configuration:
17
17
@@ -24,7 +24,7 @@ Follow the steps below:
24
24
25
25

26
26
27
-
-**Enable UTF-8 Decoding in FlutterFlow**
27
+
2.**Enable UTF-8 Decoding in FlutterFlow**
28
28
29
29
If the server does not specify encoding—or if you're still getting corrupted text—you can configure FlutterFlow to decode the API response as UTF-8 manually.
Copy file name to clipboardExpand all lines: docs/troubleshooting/api/client-server_errors_during_the_api_call.md
+30-7Lines changed: 30 additions & 7 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,13 +6,11 @@ title: Client-Server Errors during the API call
6
6
# Client-Server Errors During the API Call
7
7
8
8
9
-
When calling an API in FlutterFlow, you may run into client-server errors. These typically come as status codes that indicate what went wrong—either on your end (the client) or on the server you're requesting data from.
9
+
When calling an API in FlutterFlow, you may run into client-server errors. These typically come as status codes that indicate what went wrong, either on your end (the client) or on the server you're requesting data from.
10
10
11
11
This guide will help you understand the most common API error codes and how to fix them.
12
12
13
-
## What is an API?
14
-
15
-
An API (Application Programming Interface) lets two systems communicate with each other. When you make an API call, you're sending a request from your app (client) to a server, which responds with data.
13
+
To learn more about APIs, check out our [API documentation guide](/resources/backend-logic/rest-api/).
16
14
17
15
## Common client-side status codes
18
16
@@ -23,7 +21,7 @@ These errors are usually caused by incorrect requests from the client side.
23
21
Your request isn’t properly formatted. This could be due to a missing parameter, a typo, or incorrect syntax.
24
22
25
23
:::tip
26
-
Check the API documentation to ensure you're including the correct fields and headers.
24
+
Check the API's own documentation to ensure you're including the correct fields and headers.
@@ -90,7 +88,32 @@ These errors occur on the API server side.
90
88
91
89
The API server took too long to respond. Try simplifying your request or reducing the size of the data being sent.
92
90
91
+
92
+
**Troubleshooting Steps**
93
+
94
+
-**Clear Browser Cache and Cookies**
95
+
96
+
If you're encountering a 400 Bad Request error, clearing your browser's cache and cookies can resolve issues related to expired or invalid data.
97
+
98
+
-**Verify the Requested URL**
99
+
100
+
Ensure the URL or endpoint is correct. Remember, domain names are case-sensitive.
101
+
102
+
-**Adjust Request Parameters**
103
+
104
+
For 400 errors, check if the file size is too large (for POST requests) or if there are any other incorrect parameters.
105
+
106
+
-**Consult API Documentation**
107
+
108
+
Always refer to the API's official documentation for specific requirements and troubleshooting tips.
109
+
110
+
-**Contact API Support**
111
+
112
+
If you continue to face issues, reaching out to the API's support team can provide further assistance and insights into resolving the problem.
113
+
114
+
Understanding these common API error status codes and their solutions can significantly smooth the development process, ensuring more efficient and effective communication between your application and the APIs you rely on.
115
+
93
116
:::tip[Final tips]
94
-
- Always check the API documentation, inspect your request, and look up error messages. If the issue persists, contact the API provider.
95
-
- Once you fix the issue, your calls should return a `200 OK`—which means everything is working as expected!
117
+
- Always check the API's own documentation, inspect your request, and look up error messages. If the issue persists, contact the API provider.
118
+
- Once you fix the issue, your calls should return a `200 OK`, which means everything is working as expected!
Copy file name to clipboardExpand all lines: docs/troubleshooting/api/securing_your_api_keys_in_private_api_calls.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -8,11 +8,11 @@ title: Securing Your API Keys in Private API Calls
8
8
9
9
Ensuring the security of API keys is a critical aspect of building and maintaining a safe and reliable application. In the realm of private API calls, it's especially important to make sure your API keys are not exposed. This article aims to provide a best-practices guide on where to place your API keys to increase security in a FlutterFlow environment.
10
10
11
-
## The Misconception: Private API Calls Secure Everything
11
+
**The Misconception: Private API Calls Secure Everything**
12
12
13
-
Many users assume that simply marking an API call as 'private' is enough to protect all associated data. However, this is not the case. Private API calls run in a Cloud Function, which means any keys or sensitive data in the body will be secure — as long as they're not passed in from the frontend. Even in private API calls, if you're loading an API key from the frontend (like from Firebase remote configs), then you're still exposing it.
13
+
Many users assume that simply marking an API call as 'private' is enough to protect all associated data. However, this is not the case. Private API calls run in a Cloud Function, which means any keys or sensitive data in the body will be secure, as long as they're not passed in from the frontend. Even in private API calls, if you're loading an API key from the frontend (like from Firebase remote configs), then you're still exposing it.
14
14
15
-
## Where to Put Your API Keys
15
+
## Secure Placement of API Keys in Your Project
16
16
17
17
The ideal way to secure an API key is to include it in a request header or directly within the API endpoint URL. This ensures that it is never passed in from the client, thereby maintaining its confidentiality.
18
18
@@ -29,7 +29,7 @@ Many users assume that simply marking an API call as 'private' is enough to prot
29
29
```
30
30
The key should never be a variable that gets passed in from the frontend, as that would make it accessible via the client-side code, defeating the purpose of using private API calls for secure operations.
31
31
32
-
## How to verify that your key is secured
32
+
## Verifying the Security of Your API Key
33
33
34
34
After implementing these changes, a straightforward way to verify that your key is secured is by downloading your application code and checking to make sure the API key doesn’t appear in any frontend files.
0 commit comments