frappe-impl-whitelisted

To create secure API endpoints in Frappe, use the @frappe.whitelist() decorator and apply documented patterns for permission checks, input validation, and safe responses. This approach prevents permission bypasses, SQL injection, and data exposure.

Migrating from Server Script APIs to whitelisted methods involves transitioning your endpoint logic to Python methods decorated with @frappe.whitelist(). This provides robust error handling and parameterized access while eliminating Server Script security risks.

Yes, Frappe whitelisted methods support public guest APIs, file uploads, and background jobs. The implementation includes guidance for rate limiting and endpoint design patterns to ensure secure client integration.

The best way to handle Frappe API permissions is using whitelisted methods with parameterized access and strict input validation. This prevents SQL injection and ensures document-specific actions are securely exposed.

Testing REST APIs in Frappe involves applying documented error handling patterns within your whitelisted methods. This ensures robust responses for authenticated endpoints and document-specific actions during client integration.