API & Development
API & Development Overview
Overview of Alexandria REST APIs, remote conformance testing, authentication boundary, and developer workflows.
API & Development
Alexandria provides versioned REST APIs built on Gin to support vocabulary lifecycle management, remote conformance testing, and cryptographic identity operations, all guarded by OpenID Connect (OIDC) authentication.
Architecture of the HTTP Layer
- Prefix & Versioning: All bounded context APIs are mounted under
/api/v1. - The Guard Interface: Contexts needing public ingress (like login and callback) register routes before the authentication guard. All subsequent
/api/v1routes require either a valid authenticated session cookie or bearer token. - Root Escape Hatches: Fixed specifications like
/.well-known/did.jsonand health probes (/healthz,/livez,/readyz) mount directly at the root of the engine viaRootModule.
Topics
Remote Conformance Testing
Automated semantic verification using SHACL constraint shapes for connector and payload compliance.
Authentication & Sessions
Zitadel OIDC flows, PKCE, sealed session cookies, and token introspection.
REST API Endpoints
Catalog of endpoints for identity, DID documents, and wallet operations.
Testing & CI/CD
Running unit and integration test suites, linting, Task commands, and GitHub Actions.