BFF Service

goalixa-BFF/
├── app/
│   ├── main.py              # Entry point
│   ├── config.py            # Configuration
│   ├── middleware/
│   │   ├── auth_middleware.py
│   │   ├── rate_limit_middleware.py
│   │   └── logging_middleware.py
│   ├── routers/
│   │   ├── health.py
│   │   ├── auth.py
│   │   ├── app_router.py
│   │   └── aggregate.py
│   ├── utils/
│   │   ├── cache.py
│   │   ├── circuit_breaker.py
│   │   └── metrics.py
├── k8s/
└── requirements.txt

PUBLIC_ENDPOINTS = [
    "/", "/health", "/readiness", "/liveness", "/metrics", "/docs",
    "/bff/auth/login", "/bff/auth/register", "/bff/auth/forgot",
    "/bff/auth/password-reset/*", "/bff/auth/google", "/bff/auth/refresh"
]

# Get cached value
cached_data = await cache.get("tasks:user123")
 
# Set with TTL
await cache.set("tasks:user123", data, ttl=60)
 
# Invalidate user cache
await cache.invalidate_user_cache(user_id)
 
# Invalidate by pattern
await cache.delete_pattern("tasks:user123:*")

curl -X GET http://localhost:8000/bff/aggregate/dashboard \
  -H "Authorization: Bearer <access_token>"

{
  "status": "success",
  "data": {
    "tasks": [...],
    "projects": [...],
    "goals": [...],
    "habits": [...],
    "todos": [...],
    "user": {...}
  },
  "errors": {},
  "timestamp": "2026-04-06T10:00:00Z"
}

curl -X POST http://localhost:8000/bff/app/tasks \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <access_token>" \
  -d '{
    "title": "New task",
    "priority": "high",
    "project_id": 1
  }'

curl -X GET http://localhost:8000/health/circuit-breaker/status

{
  "auth_service": {
    "state": "CLOSED",
    "failures": 0,
    "last_failure": null
  },
  "app_service": {
    "state": "CLOSED",
    "failures": 0,
    "last_failure": null
  }
}

docker run -p 8000:8000 \
  -e AUTH_SERVICE_URL=http://auth-service:5001 \
  -e APP_SERVICE_URL=http://core-api:5000 \
  -e AUTH_JWT_SECRET=your-secret \
  -e REDIS_URL=redis://redis:6379/0 \
  -e REDIS_ENABLED=true \
  goalixa-bff:latest

apiVersion: apps/v1
kind: Deployment
metadata:
  name: bff
spec:
  replicas: 3
  selector:
    matchLabels:
      app: bff
  template:
    metadata:
      labels:
        app: bff
    spec:
      containers:
      - name: bff
        image: goalixa/bff:latest
        ports:
        - containerPort: 8000
        env:
        - name: AUTH_SERVICE_URL
          value: http://auth-service:5001
        - name: APP_SERVICE_URL
          value: http://core-api:5000
        - name: AUTH_JWT_SECRET
          valueFrom:
            secretKeyRef:
              name: goalixa-secrets
              key: jwt-secret
        - name: REDIS_ENABLED
          value: "true"
        - name: REDIS_URL
          value: redis://redis:6379/0
        resources:
          requests:
            memory: "256Mi"
            cpu: "250m"
          limits:
            memory: "512Mi"
            cpu: "500m"
        livenessProbe:
          httpGet:
            path: /liveness
            port: 8000
        readinessProbe:
          httpGet:
            path: /readiness
            port: 8000
---
apiVersion: v1
kind: Service
metadata:
  name: bff
spec:
  selector:
    app: bff
  ports:
  - port: 80
    targetPort: 8000