Konubinix' opinionated web of thoughts

Goa

Fleeting

goa has built-in support for multiple security schemes: basic auth, API key (a.k.a. shared secret), JWT and OAuth2

https://goa.design/design/security/

providing a single source of truth from which server code, client code, and documentation is derived

https://goa.design/learn/introduction/

don’t have to worry about the documentation getting out of sync as Goa takes care of generating OpenAPI specifications for HTTP based services and gRPC protocol buffer files for gRPC based services (or both if the service supports both transports).

https://goa.design/learn/introduction/

rest assured that the implementation follows the documentation as the code is generated from the same source

https://goa.design/learn/introduction/