Posts

Disclaimer: This blog post is automatically generated from project documentation and technical proposals using AI assistance. The content represents our development journey and architectural decisions. Code examples are simplified illustrations and may not reflect the exact production implementation. Table of Contents The Architecture Evolution Understanding the Repository Pattern Aggregate Design Single Transaction Strategy Implementation Journey Benefits Realized The Architecture Evolution When Caroline, Claude, and I first built the event sourcing system for Scores, we followed a pattern we’d seen in many examples: separate command handlers, an intermediate evolver service, and projections consuming events. It worked, but as we added more features, we realized we’d created unnecessary complexity. ...

Disclaimer: This blog post is automatically generated from project documentation and technical proposals using AI assistance. The content represents our development journey and architectural decisions. Code examples are simplified illustrations and may not reflect the exact production implementation. Table of Contents The Security Challenge OAuth2 Token Exchange Architecture Token Types and Lifetimes Delegation Chain with Act Claims WebSocket and SSE Integration OpenID Discovery and JWKS Key Management and Rotation Key Learnings The Security Challenge When Caroline and I were designing security for Scores, we faced a tricky problem: how do you securely authenticate WebSocket and Server-Sent Events connections without exposing tokens in URLs or requiring users to re-authenticate constantly? ...