Designing an API gateway on a laptop
An allowlist and a token check in front of an API, built in Caddy on a laptop, and the problems that turned up long before production.
An allowlist and a token check in front of an API, built in Caddy on a laptop, and the problems that turned up long before production.
Three apps in one stack and three different answers to where a config value really comes from, so the same env setup doesn't behave the same way twice.
Cookies and Origin checks only behave like production if the hostnames do, so every local site gets real HTTPS from a local CA, except Firefox has its own idea about which CAs to trust.
There was no way to run the whole platform locally, so I wrote a small Go CLI that renders plain docker compose projects from a service catalog, and most of what I learned had nothing to do with compose.