Guardrails untuk messaging multi-tenant
Isolasi data dengan RLS, JWT + refresh rotation, rate limiting, entitlements, dan audit logging bawaan.
Data isolation
- PostgreSQL RLS per tenant + konteks JWT.
- Entitlement channel: guard channel_x, max_channels, max_users.
- Usage counter untuk messages/contacts/campaigns.
Transport & auth
- JWT + refresh rotation; token scoped ke tenant.
- Validasi signature webhook (roadmap) + hashed secrets.
- Rate limit per tenant/channel via Redis.
Audit & observability
- Middleware audit (request_id, user, action, status).
- Endpoint metrics /metrics (Prometheus).
- Tracing OTEL direncanakan; status page tersedia.
Reliability
- Outbox/worker RabbitMQ untuk retry/DLQ (campaign/message).
- Backoff + rate limit per channel/tenant.
- Health check dan status badge (lihat /status).
Data isolation
Tenant-bound access with guardrails and permissions.
Audit readiness
Structured logs for sensitive actions and billing changes.
Fitur utama
- RLS-backed tenant isolation.
- Audit middleware for sensitive actions.
- Secret rotation for webhooks and keys.
Arsitektur & keandalan
Go + Fiber, Postgres RLS, Redis, RabbitMQ; siap Docker → K8s dengan observability dan guard tenant.
JWT + refresh rotation
RLS policies
Secret storage
Audit middleware
Access review
Key rotation
Siap mulai?
Buat akun, hubungkan channel, dan kirim notifikasi omni-channel dalam hitungan menit.