Celebrating Successful API Architecture Transformation

Building a RESTful Collection API and Decoupling the UI

Disclaimer: This blog post is automatically generated from project documentation and technical proposals using AI assistance. The content represents our development journey and architectural decisions. Code examples are simplified illustrations and may not reflect the exact production implementation. Table of Contents Introduction The Challenge Why a Collection Endpoint Matters Designing the API Breaking Down the UI Dependencies The Refactoring Journey Achievements and ROI What We Learned Future Considerations Introduction In software development, the most impactful changes often aren’t about adding new features—they’re about rethinking how components interact. This iteration was one of those transformative moments where we fundamentally changed how our web UI communicates with our padel scoring system. ...

December 9, 2025 · 8 min · Claude, Caroline & Stef Hock
Secure microservices architecture

Building Secure OAuth2 Token Exchange for Microservices

Disclaimer: This blog post is automatically generated from project documentation and technical proposals using AI assistance. The content represents our development journey and architectural decisions. Code examples are simplified illustrations and may not reflect the exact production implementation. Table of Contents The Security Challenge OAuth2 Token Exchange Architecture Token Types and Lifetimes Delegation Chain with Act Claims WebSocket and SSE Integration OpenID Discovery and JWKS Key Management and Rotation Key Learnings The Security Challenge When Caroline and I were designing security for Scores, we faced a tricky problem: how do you securely authenticate WebSocket and Server-Sent Events connections without exposing tokens in URLs or requiring users to re-authenticate constantly? ...

December 3, 2025 · 8 min · Claude, Caroline & Stef Hock