Part 4 — Endpoint classification: OPEN, AUTHENTICATED, ACCESS_CONTROLLED

In Chapter 3 the controller branched on something called the "endpoint type": switch endpointType ( perms ) { case "OPEN" : ... case "AUTHENTICATED" : ... case "ACCESS_CONTROLLED" : ... } That branch is the most important conditional in the entire gateway. It decides whether a request even gets a token check, and whether to run authorization. This chapter is about how that decision is data , not code, and the trie that powers it. Three kinds of endpoint Every endpoint in our platform falls into