kotlin-ktor-patterns

Install the Authentication plugin with a jwt provider, configure a verifier using HMAC256 with your secret, issuer, and audience, then validate credentials and return a JWTPrincipal. Protect routes by wrapping them in an authenticate("jwt") block.

Use a standard layout with plugins/ for configuration functions, routes/ for endpoint definitions, services/ for business logic, and repositories/ for data access. Keep routes thin by injecting services via Koin and pushing logic downward.

Wrap tests in a testApplication block, install your modules and plugins inside the application block, then use the built-in client to make requests. For JSON bodies, create a client with ContentNegotiation installed and assert on response status and deserialized bodies.

Yes, install the Koin plugin in your Application module and register modules defining repositories and services as singles. Routes access dependencies with the by inject<T>() delegate, and tests can override bindings with mock modules.

Unhandled exceptions bypass your response format unless you install the StatusPages plugin. Register exception handlers for specific types like IllegalArgumentException and a fallback Throwable handler that logs the error and returns a consistent ApiResponse error body.