Require Shared Secret
A public /exec URL is easy to leak, so your doPost shouldn't trust whoever calls it. requireSharedSecret(e, propertyKey) reads the expected…
Require Shared Secret
A public /exec URL is easy to leak, so your doPost shouldn't trust whoever calls it. requireSharedSecret(e, propertyKey) reads the expected…
Pin a stable web app URL with versioned deployments
Webhooks and Zapier "Custom Request" steps hate moving targets. If you Deploy → New deployment every time you tweak doPost, partners get a…
Health Check Payload
When a client asks “is the thing still working?”, you want a URL you can open (or point an uptime monitor at) that answers in one line…
“Execute as me” vs “as the user” — pick the web app identity that won’t haunt you
You deploy a doGet / doPost web app, share the URL, and suddenly writes land under the wrong account — or the script can’t see the sheet at…
JSON OK / ERR helpers for Web Apps
doGet / doPost handlers stay readable when every success and failure returns the same JSON shape. jsonOk / jsonErr wrap ContentService so…