I don’t have an informed answer here, but after a reviewing an auth PR I stumbled upon the following Reitit + auth related links. Maybe you find them useful: - https://github.com/metosin/reitit/issues/185#issuecomment-445557995 - https://github.com/practicalli/clojure-web-services/issues/98 - https://cljdoc.org/d/tolitius/funcade/0.1.17/api/funcade.middleware.reitit#scope-middleware - https://github.com/tolitius/funcade/blob/8d8f0a8666148773caf33754c1e2477b305f5322/src/funcade/middleware/buddy.clj#L9-L29

Indeed they are very helpful. I've managed to get buddy to work with some feedback from @U055NJ5CC a while back but the solution was pretty contorted.

I guess I more interested in a reference implementation of an API gateway facade pattern. Thanks again for your helpful inputs @U0FT7SRLP

@U0G2VJQ21 Np! Please share if you find anything helpful. I am also looking for better patterns

In the spirit of OSS maybe it would be interesting to build a reference implementation and get feedback. I am looking at krakend (for inspiration) and it's quite good. Alas, it's mostly GUI driven. Welp, I am hoping for is something more programmatic.

I don’t have specific expertise for API Gateways, but I can imagine the data driven approach of Reitit could be a good fit here. Not sure how to interpret those performance numbers of Krakend. Seems like you would put Kraken in front of your actual application? You would want to do something like this with Clojure + Reitit?

I was actually thinking of baking something that is equivalent to krakend in clojure using reitit. The challenge from what I can tell with krakend is that while it's good for a small number of of endpoints it could be massive if we have to click through a UI to generate/manage them. On the other hand with a reitit, we can as you've suggested with a data driven/programmatic approach get API gateway up and running efficiently. The challenge of course here is to start the baking of an API gateway reference implementation from which we can extend to include all the features one would expect from a high end API gateway.

I like the idea