Millipede Academy

Book 5 · Lesson 5.4

Route ingestion through gateway

  • POST webhook via gateway not direct :8081
  • Trace proxy() path stripping /api prefix
  • Explain no direct service access goal

Prerequisites: 5.3

Browser/curlhttps://localhost:8443/api/metrics/summary + Bearer JWT
GatewayValidate JWT · strip Authorization · mTLS client to backend
AnalyzerPlain or mTLS :8082/:8084 — SQL query → JSON
ResponseGateway forwards status + body to client
 
curl -sk https://localhost:8443/api/webhooks/hello \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"source":"github","action":"opened"}'

Teach-back prompt

Why strip Authorization before upstream proxy?

Webhook via gateway

Lesson 5.4 check

1. Webhooks in hardened path go through…