Go Backend Masterclass: Build Enterprise REST APIs

Explore the request response cycle by showing how a client and server exchange HTTP requests and responses, covering methods, headers, DNS resolution, a three-way handshake, TLS handshake, and status codes.

Explore the server side, where the back end processes requests, manages data, and runs application logic via servers, databases, and APIs such as RESTful and GraphQL.

Choose Linux as the development environment for building enterprise rest APIs with Go. Enable Windows subsystem for Linux (wsl) on Windows to run Linux tools for benchmarking and requests.

Master the net/http package to build a Go HTTP server, defining handlers and routes to process requests and send responses for enterprise REST APIs.

Install wrk, a versatile benchmarking tool, on macOS via homebrew (brew install wrk), Windows through WSL, and Linux with sudo apt-get install wrk to benchmark your enterprise rest APIs.

Build a Go server that supports HTTP/2 with HTTP 1.1 fallback over HTTPS, using net/http and http2, with development self-signed certificates and production TLS from certifying authorities.

Test a go backend api over tls and https, switching from http1 to http2. Diagnose tls handshake errors and self-signed certificates, and compare ssl verification in postman and browsers.

Explore JSON serialization and deserialization in Go, mastering marshal, unmarshal, and the new encoder and decoder for streaming, in-memory, and large data sets.

Organize a professional rest application programming interface project with a scalable folder structure, including cmd, internal, models, repository, pkg, and proto, to support planning, environment variables, and data access.

Learn to implement path parameters in Go REST APIs using the standard library, from legacy extraction to the easier approach in Go 1.22, with modular route handlers and ID-based routing.

Learn how to use query parameters to filter and sort data in Go, extracting key values from the URL with the request object and Get method, and set default values.

Initialize a git repository at the project root and switch the branch to main. Use a dot gitignore to hide environment variables and confidential data, secret keys for jwt tokens.

Learn how the Go mux multiplexer routes http requests to multiple endpoints, enables grouping and middleware, and helps organize scalable APIs.

Build a Go response time middleware that measures request duration from receipt to response, capturing status codes with a custom response writer and logging performance using x response time header.

Implement an HTTP parameter pollution (HPP) middleware in Go that cleans query and body parameters, enforces a whitelist, and lets you keep the first or last value for duplicates.

Build a Go API GET handler for teachers, supporting list, filter by first or last name, and get by id with path parameters, using an in-memory map and JSON responses.

Add a post handler to create single or multiple teachers using JSON decoding, mutex protection, and in-memory storage, returning a status and added data.

MariaDB provides an open source, MySQL-compatible relational database management system with high performance and security. It supports multiple storage engines, replication, and clustering for high availability.

Install and use DBeaver or phpMyAdmin as MariaDB GUI tools. Connect to MariaDB or MySQL on port 3306, test the connection, and manage your databases.

Master core CRUD operations in MariaDB via the command line, including starting the server, creating databases and tables, inserting, querying, updating, and deleting records.

Understand how the dot env file manages environment variables for api development, storing database credentials, api keys, secret keys, and ports to keep secrets out of code.

Create the school database and a teachers table with id, first_name, last_name, email (unique), class, and subject, set id to auto_increment starting at 100, and index the email.

Learn how to implement the put method to fully replace a teacher record, handle id extraction, decode JSON, and update the database.

Improve patch handling by using reflect to update any number of struct fields based on json tags. This dynamic approach enables type-aware updates and scales for enterprise rest apis.

Identify the teacher by id, delete the record from the teachers table via sql, and return a json response with status and id.

Learn how Go 1.22 introduces method-based routing and easier path parameter extraction to modernize enterprise REST APIs, replacing the older routing technique and clarifying go.mod version requirements.

Refactor the mux router to leverage Go language features, implementing get, post, put, patch, and delete for teachers; ensure proper path parameter routing and single-space syntax.

Learn how db tags map struct fields to database columns, compare manual SQL with orm options like gorm, and build custom reflection-based query utilities for a REST API.

Create a students table with id, first name, last name, email, and class, linking to teachers via class, and enable crud operations by indexing class in teachers.

Set up the students route with a get handler returning a welcome message, replicate and rename the teachers crud for students, and enable sorting and filters with shared utils.

Test the students API routes end-to-end by creating test data, addressing foreign key constraints, and validating GET, POST, PUT, PATCH, and DELETE operations with Postman.

Develop and test the get students by teacher id endpoint that queries the database, scans rows, builds a students list, and returns status, count, and data with proper error handling.

Implement an execs router using a new mux to handle login, logout, forgot password, reset password, and update password routes, with exec-specific get, post, patch, and id-based paths.

Secure password hashing for an enterprise REST API using bcrypt, pbkdf2, and Argon2id with salt and base64 encoding, storing only hashed passwords and not plain text.

Authenticate users by verifying identity with credentials or tokens, including JSON web tokens and multi-factor methods. Authorize actions via RBAC, ABAC, and ACLs, enforcing least privilege and regular reviews.

Implement a forgot password handler that validates the email, generates a reset token with expiry from env, updates the user record, and sends the reset link via Go Mail.

Explore how CSRF tricks authenticated web apps, and how APIs with tokens mitigate risk through same-site cookies, double-submit cookies, custom headers, and CSRF tokens.

Obfuscate code to deter reverse engineering while preserving functionality, protecting intellectual property and API security. Exercise caution about performance overhead and maintainability, and pair obfuscation with other security measures.