hey, I use react query and graphql client in a next app to fetch data from contentful. I wonder if I need to have the token publicly available in order to use react query due to the fact the revalidating of the states is happening on the client side?! Or am I misunderstanding something here? I am just concerned about having the access and previewtoken written in the client bundle?! Any ideas?
#refetching on client side?!
warm rose
zenith basin
You can create your own API route that react query would call. And that API route would talk to contentful and use the token (in the backend).
warm rose
so serverless functions would be the correct way here?!
zenith basin
Regardless of whether you use react query or not, if you don't want to expose your token to the frontend you'll have to create your own intermediary api... One thing to check is whether the token is safe to be sent to the frontend (only the provider can tell you that). If that token is private (not a public key), I don't see another option.