This site was built to compliment the existing NetSuite Professionals Slack Community by adding a means for members to easily find answers to common questions and to create a searchable database of those questions and answers.

NetSuite Professionals

<@UP0GS40AF> Suitelet:
• Those are the ones officially documented to inject HTML code.
• You don't need to deal with Auth.
• Your backend Suitelet does not need to be available without login.

I've think I have seen hints that you don't need to auth to a RESTlet if it's calling it internally from a logged in user, but I may have misread.

choose a suitelet, its not forced to be available externally and you have more options on permissions

From a development/iteration standpoint, isn't a bit convenient to be able to compile and run locally and call netsuite?

kinda depend on if you think its more work for the backend suitelet or the frontend spa

you could make the suitelet temporarily available externally if you really wanted to

you could also go with a restlet if you think you wont have permission issues

True, making it temporarily available externally is a simple solution.

because a restlet does not allow unauthenticated access, has several times more governance support and is optimized for JSON