Archive

18 posts published so far

Oct 25, 2026
Part 17: Wrap-up: the checklist, what we skipped, and where to go next
Rashik Ansar Shaik
Oct 25, 2026
Part 16: OpenAPI: a contract that can't drift, and a docs page you can trust
Rashik Ansar Shaik
Oct 25, 2026
Part 15: Idempotency keys: making retries safe
Rashik Ansar Shaik
Oct 25, 2026
Part 14: TLS: encrypting the wire, hot-reloading certificates, and verifying the database
Rashik Ansar Shaik
Oct 25, 2026
Part 13: Protecting the login endpoint: layered rate limiting
Rashik Ansar Shaik
Oct 25, 2026
Part 12: Authorization: roles, ownership, and the bug class behind most API breaches
Rashik Ansar Shaik
Oct 25, 2026
Part 11: Authentication: passwords, JWTs and refresh tokens that can't be replayed
Rashik Ansar Shaik
Oct 25, 2026
Part 10: Rate limiting, and the spoofing trap that breaks most implementations
Rashik Ansar Shaik
Oct 25, 2026
Part 9: Pagination and API performance
Rashik Ansar Shaik
Oct 25, 2026
Part 8: Docker and docker compose: ship the app, run the whole stack
Rashik Ansar Shaik
Oct 25, 2026
Part 7: Observability: logs, metrics, traces and health checks
Rashik Ansar Shaik
Oct 24, 2026
Part 6: Moving to PostgreSQL
Rashik Ansar Shaik
Oct 24, 2026
Part 5: A second resource: structure, relations and cascades
Rashik Ansar Shaik
Oct 24, 2026
Part 4: Configuration that fails fast
Rashik Ansar Shaik
Oct 24, 2026
Part 3: Production basics: validation, errors, context, middleware, graceful shutdown
Rashik Ansar Shaik
Oct 24, 2026
Part 2: Persistence with SQLite and database/sql
Rashik Ansar Shaik
Oct 23, 2026
Part 1: CRUD in memory with nothing but net/http
Rashik Ansar Shaik
Oct 23, 2026
Build a production-grade REST API in Go, step by step
Rashik Ansar Shaik

Part 17: Wrap-up: the checklist, what we skipped, and where to go next

Part 16: OpenAPI: a contract that can't drift, and a docs page you can trust

Part 15: Idempotency keys: making retries safe

Part 14: TLS: encrypting the wire, hot-reloading certificates, and verifying the database

Part 13: Protecting the login endpoint: layered rate limiting

Part 12: Authorization: roles, ownership, and the bug class behind most API breaches

Part 11: Authentication: passwords, JWTs and refresh tokens that can't be replayed

Part 10: Rate limiting, and the spoofing trap that breaks most implementations

Part 9: Pagination and API performance

Part 8: Docker and docker compose: ship the app, run the whole stack

Part 7: Observability: logs, metrics, traces and health checks

Part 6: Moving to PostgreSQL

Part 5: A second resource: structure, relations and cascades

Part 4: Configuration that fails fast

Part 3: Production basics: validation, errors, context, middleware, graceful shutdown

Part 2: Persistence with SQLite and database/sql

Part 1: CRUD in memory with nothing but net/http

Build a production-grade REST API in Go, step by step