arie378/tokoflow-gateway repository overview

⁠tokoflow-gateway

HTTP edge/API gateway for the Tokoflow retail SaaS platform. Built on Helidon SE 4 (virtual threads) and shipped as a GraalVM native-image binary.

⁠What it does

• Terminates external HTTP/REST traffic and verifies the user JWT.
• Mints the short-lived internal gateway→api token and forwards requests to tokoflow-api over gRPC (grpc-java client, h2c).
• Single entry point for the SPA and mobile/POS clients.

⁠Architecture

Front door in front of tokoflow-api. Typically reverse-proxied by tokoflow-portal (which serves the SPA and forwards /api/* here). Exposes the platform health gate at /healthz.

⁠Image

• Native binary · entrypoint id.tokoflow.gateway.TokoflowGatewayMain
• Exposes 8080 (HTTP)

⁠Key environment

• TOKOFLOW_API_HOST / TOKOFLOW_API_PORT — upstream gRPC target
• INTERNAL_TOKEN_SECRET — shared with tokoflow-api (must match)
• JWT_SECRET — user-token verification
• OTEL_* (OpenTelemetry → OpenObserve)