Notes on backend engineering, Go, and the infrastructure that runs it.https://natnaelalemayehu.com/enhttps://natnaelalemayehu.com/writing/authorization-and-ownership/https://natnaelalemayehu.com/writing/authorization-and-ownership/Authentication vs. authorization in a Go API: check ownership inside the SQL query, and why someone else's note should return 404, not 403.Mon, 02 Nov 2026 00:00:00 GMTgoauthtestinghttps://natnaelalemayehu.com/writing/password-auth-and-sessions/https://natnaelalemayehu.com/writing/password-auth-and-sessions/Hash passwords with Argon2id, keep sessions in a Postgres table, and turn a cookie into a logged-in user with a small piece of Go middleware.Mon, 26 Oct 2026 00:00:00 GMTgoauthpostgreshttps://natnaelalemayehu.com/writing/testing-postgres-shipping-docker/https://natnaelalemayehu.com/writing/testing-postgres-shipping-docker/Embed migrations in the Go binary, test against a real Postgres with Testcontainers, check sqlc output in CI, and shut down gracefully.Mon, 19 Oct 2026 00:00:00 GMTgotestingdockerhttps://natnaelalemayehu.com/writing/sqlc-goose-type-safe-database/https://natnaelalemayehu.com/writing/sqlc-goose-type-safe-database/Schema migrations with goose and a type-safe data layer generated by sqlc, including Postgres error handling and transactions with pgx.Mon, 12 Oct 2026 00:00:00 GMTgosqlcpostgreshttps://natnaelalemayehu.com/writing/go-postgres-docker-compose/https://natnaelalemayehu.com/writing/go-postgres-docker-compose/Run a Go service and a pinned Postgres version together in Docker Compose, connect them with pgx, and build it all into a small production image.Mon, 05 Oct 2026 00:00:00 GMTgodockerpostgres