APIs
Webhook Design for Go APIs That Customers Can Trust
Design webhooks customers can trust in Go: an event envelope, per-endpoint API versions, filters, secret rotation, auto-disable, replay and signing.
21 min read
Library
Everything you need to level up your coding skills.
Web
Build a Link Preview Service in Go Without SSRF Holes
Build a link preview service in Go that fetches a URL and reads its Open Graph tags, with a dialer that blocks private addresses after DNS to stop SSRF.
17 min read
APIs
Filtering and Sorting in Go APIs Without SQL Injection
Build filter and sort parameters for a Go API from an allowlist: bound values, mapped columns, escaped LIKE wildcards and a blind injection through ORDER BY.
13 min read
Web
Redirects in Go and the Right Status Code to Use for Each
Pick between 301, 302, 303, 307 and 308 in Go with http.Redirect, see which keep the method and body, and avoid open redirects from a query value.
4 min read
Web
Common Go Web Server Errors and What They Really Mean
Reproduce the errors Go HTTP servers and clients print, from address already in use to HTTP response to HTTPS client, and see what each message means.
11 min read
APIs
OpenAPI for Go Services Generated From Code or From Spec
Compare code-first and spec-first OpenAPI in Go with working code: huma generating the spec from types, and kin-openapi catching bad requests and drift.
11 min read
Web
Retries and Backoff for the Go HTTP Client Done Safely
Add retries to a Go HTTP client as a RoundTripper with exponential backoff and jitter, Retry-After, body replay and a rule for which requests are safe.
9 min read
Web
Templ Streaming and Partial Rendering for Faster Pages
Stream templ pages with templ.Flush and WithStreaming so the shell reaches the browser before slow data is ready, and see what a failed streamed render does.
7 min read
APIs
Cache API Responses in Go With Redis and Invalidate Safely
Cache API data in Redis from Go: cache-aside with singleflight, a version fence against stale writes, namespace versions for lists and TTL jitter, on Redis 8.
16 min read
WebGuide
Route Organization for Larger Go Web Applications Cleanly
Organize routes in a growing Go web app with a small Group helper on top of ServeMux, one routes method per feature, shared middleware and a route table test.
14 min read
APIs
Error Responses in Go APIs With Problem Details RFC 9457
Return Go API errors as RFC 9457 problem documents: a Problem type with extensions, one table mapping errors to statuses, and a 500 that leaks nothing.
13 min read
Web
Build a Reverse Proxy in Go With httputil ReverseProxy
Build a reverse proxy in Go with httputil.ReverseProxy: Rewrite instead of Director, forwarded headers, error handling, streaming and path based routing.
14 min read
Get new articles by email
We send one email when a new article is published. No spam.