Maxim Mironjuk
-
July 15, 2025
PhpStorm's built-in HTTP client is, for many PHP and Magento developers, the fastest way to test REST and GraphQL endpoints straight from the IDE. Anyone who writes admin tokens, API keys, or database credentials in plain text into a .http file risks, sooner or later, having those exact values end up in the next commit. This article shows how http-client.env.json and http-client.private.env.json separate public and private environment variables cleanly, so the whole team can share the same requests without everyone seeing the same secrets.