Update backend-only var and auth docs w.r.t. app security

[masenf]

No description provided.

[larsblumberg]

Thank you for these valuable additions to the docs! I just learned about state_auto_setters in rxconfig.py which I will happily enable from now on to mitigate potential vulnerability threats

[masenf]

state_auto_setters will be new in reflex 0.7.11 to be published next week.

just getting ahead of the docs update

[adhami3310]

@larsblumberg we only merged that into main recently: reflex-dev/reflex#4480
it will be in 0.7.11!

[adhami3310]

masen stop beating me to things >:( /s

[larsblumberg]

@larsblumberg we only merged that into main recently: reflex-dev/reflex#4480
it will be in 0.7.11!

No worries, I hacked my way around it, this works well:

api = Starlette()

@api.route("/publications/{nd_publication_id}")
@api.route("/publications/{nd_publication_id}/")
async def get_publication(request):
    ...

@asynccontextmanager
async def app_lifespan():
    ...

app = App()
app._api.mount("/api", api)
app.register_lifespan_task(app_lifespan)