Implementing JSON Schema Validation at Microservice Trust Boundaries
Learn how to implement JSON Schema validation at microservice trust boundaries to prevent data corruption, ensure contract adherence, and maintain forward compatibility.
Loading…
ReadMeFeed / Community knowledge
#api-gateway
Real questions. Useful conversations. Find the people who know your stack.
OpenAPI 3.0 Bearer JWT Enforcement at the API Gateway
Use OpenAPI 3.0 to define bearer-token security, enforce JWT verification at the gateway, and keep backend services free of redundant auth parsing.
openapi
AWS Lambda Function URLs: Direct HTTPS Endpoints Without API Gateway
Lambda Function URLs attach a dedicated HTTPS endpoint directly to a function, bypassing API Gateway. Learn the IAM auth model, a worked resource-based policy example, and the limits you hit without edge validation.
Splitting One Graph Across Teams: Apollo Federation v2 with @key, @requires, and @provides
Apollo Federation v2 lets each team own a subgraph while clients query one graph. Here's how @key, @requires, and @provides coordinate it, with a verifiable example.
Architecting a GraphQL Gateway for Microservice Aggregation
Learn how to build a GraphQL gateway to aggregate microservices, focusing on query complexity scoring, trust boundaries, and preventing recursive query DoS attacks.
facebookOry Oathkeeper Rule Ordering: Why Your JWT Rules Silently Fail
Ory Oathkeeper stops at the first matching access rule and never hot-reloads file-based config. Learn how rule ordering, case-sensitive JWT claims, and restarts cause silent routing failures — and how to verify which rule actually fired.
ory