SPA Management API Token

[near]

Hi! In the FAQ below, About No 4 answer – Make sure your backend is not requesting a new token for every email change.
Does this mean we have to save Management Token in my database??

How can I enable users to change their email address from a SPA or native app?

Question: How can I enable users to change their email address from a SPA or native app? Answer: Public clients (like SPAs and native applications) are restricted from requesting tokens for the management API with the proper scopes for updating a user’s email. These types of applications are limited to a few specific scopes. Because of these limitations, email change requests from public clients must flow through a backend or proxy API. This could be a serverless function with the sole purpose…

[tyf]

Hi there @near !

@near

Does this mean we have to save Management Token in my database??

This is definitely an option - As mentioned in the FAQ you will want to store the Management API Access Token on your backend and re-use it accordingly. Please take a look at this article regarding token best practices:

Token Best Practices

Hope this helps!