moai-domain-backend

Create a SecurityManager with passlib CryptContext for bcrypt hashing, then encode tokens with HS256 and an expiration claim. Protect routes by injecting an HTTPBearer dependency that decodes the token and raises 401 on expired or invalid credentials.

Check Redis for a cached key before querying the database, then store results with a TTL using setex. On create, update, or delete operations, invalidate the corresponding cache keys so reads never return stale data.

SQLAlchemy uses QueuePool with pool_size, max_overflow, and pool_pre_ping for relational databases like PostgreSQL. Motor provides an async client for MongoDB with maxPoolSize and minPoolSize settings, suited for document storage rather than relational queries.

Yes, it uses aio-pika to declare a topic exchange, publish JSON events with routing keys, and subscribe queues with durable bindings. Services like order processing and notifications communicate through events without direct coupling.

Connection pools exhaust when sessions are not closed or pool sizes are too small for concurrency. Increase pool_size and max_overflow, enable pool_pre_ping for health checks, and always use async context managers to return connections.

Unbounded endpoint growth creates a monolith-in-disguise with tangled responsibilities. Evaluate service boundaries first, and consider extracting a separate microservice with its own data store when the domain logic diverges.