Best Practices

1
const apiKey = "deel_live_abc123"; // ❌ Never hardcode

1
const apiKey = process.env.DEEL_API_KEY; // ✅ Use environment variables

1
// Requesting all possible scopes ❌
2
scopes: "contracts:read contracts:write people:read people:write ..."

1
// Only what you need ✅
2
scopes: "contracts:read" // Just reading contracts

1
function sanitizeEmail(email) {
2
  return email.trim().toLowerCase();
3
}
4
5
function validateContractInput(input) {
6
  return {
7
    worker_email: sanitizeEmail(input.worker_email),
8
    job_title: input.job_title.trim().substring(0, 100), // Limit length
9
    rate: Math.max(0, Number(input.rate)), // Ensure positive number
10
    // ... other fields
11
  };
12
}

1
// Store dates in UTC
2
const startDate = new Date().toISOString();
3
4
// When displaying to users, convert to their timezone
5
const userTimezone = 'America/New_York';
6
const displayDate = new Intl.DateTimeFormat('en-US', {
7
  timeZone: userTimezone,
8
  dateStyle: 'full',
9
  timeStyle: 'long'
10
}).format(new Date(startDate));

1
async function getAllContracts() {
2
  let allContracts = [];
3
  let page = 1;
4
  let hasMore = true;
5
6
  while (hasMore) {
7
    const response = await deelAPI.get('/contracts', {
8
      params: {
9
        page,
10
        limit: 100 // Max page size
11
      }
12
    });
13
14
    allContracts = allContracts.concat(response.data);
15
    hasMore = response.data.length === 100;
16
    page++;
17
18
    // Add small delay to avoid rate limits
19
    if (hasMore) await sleep(100);
20
  }
21
22
  return allContracts;
23
}

1
const axios = require('axios');
2
const http = require('http');
3
const https = require('https');
4
5
const deelAPI = axios.create({
6
  baseURL: 'https://api.letsdeel.com/rest/v2',
7
  httpAgent: new http.Agent({ keepAlive: true }),
8
  httpsAgent: new https.Agent({ keepAlive: true })
9
});

1
const response = await deelAPI.get('/contracts', {
2
  timeout: 10000 // 10 second timeout
3
});

1
// If API supports field selection
2
const response = await deelAPI.get('/contracts', {
3
  params: {
4
    fields: 'id,status,worker_name,start_date' // Only needed fields
5
  }
6
});

1
// ❌ Sequential (slow)
2
const contract = await getContract(contractId);
3
const worker = await getWorker(workerId);
4
const invoices = await getInvoices(contractId);
5
6
// ✅ Concurrent (fast)
7
const [contract, worker, invoices] = await Promise.all([
8
  getContract(contractId),
9
  getWorker(workerId),
10
  getInvoices(contractId)
11
]);

1
function logAuditEvent(event) {
2
  auditLogger.info({
3
    timestamp: new Date().toISOString(),
4
    userId: event.userId,
5
    action: event.action, // 'contract_created', 'data_accessed', etc.
6
    resourceId: event.resourceId,
7
    ipAddress: event.ipAddress,
8
    userAgent: event.userAgent
9
  });
10
}