lucidchart-prod-checklist

# Lucidchart Production Checklist ## Overview Lucidchart integrations interact with collaborative diagrams that may be actively edited by multiple users simultaneously. A production deployment must handle OAuth2 token lifecycle management, respect document-level collaboration locks, and account for export throttling on large diagrams. Failing to version API headers correctly causes silent schema drift, while unbounded export requests can exhaust memory on complex documents. This checklist ensures your Lucidchart integration is resilient to these collaboration and export edge cases. ## Prerequisites - OAuth2 client credentials registered in Lucid developer portal (production app) - Secrets manager configured (Vault, AWS Secrets Manager, or GCP Secret Manager) - Monitoring stack operational (Datadog, Grafana, or CloudWatch) - Test workspace with sample diagrams covering all export formats (PNG, PDF, SVG) ## Authentication & Secrets - [ ] OAuth2 client ID and secret stored in vault/secrets manager (never in code) - [ ] Token rotation implemented with refresh token flow (access tokens expire in 60 min) - [ ] Refresh tokens stored encrypted at rest, separate from client credentials - [ ] Token refresh logic handles concurrent requests (mutex/lock to prevent duplicate refreshes) - [ ] Scopes restricted to minimum required (`lucidchart.document.read`, `lucidchart.document.export`) ## API Integration - [ ] Base URL points to `https://api.lucid.co/v1` (production endpoint) - [ ] `...