I’ve written a new tutorial on Go’s CrossOriginProtection middleware, explaining how it works and how you can combine it with SameSite cookies and TLS 1.3 to effectively prevent CSRF attacks.

www.alexedwards.net/blog/prevent...

Way back in 2014 I wrote a blog post "Making and using HTTP Middleware in Go", which become one of the most read things I've ever made.

I decided it was time to give it a bit of love... I've modernized the examples and restructured the post and explanations to (hopefully!) improve it further.

I've just finished writing a new blog post "How to manage configuration settings in Go web applications".

I talks through patterns for using flags, env vars and config files, and how to pass settings to where they are needed in your application code.

www.alexedwards.net/blog/how-to-...

It's a bit overdue, but I finally updated my "which #golang router should I use?" blog post to reflect the `http.ServeMux` changes in Go 1.22.

www.alexedwards.net/blog/which-g...

New blog post now out: alexedwards.net/blog/organiz...

It talks about how to extend Go's http .ServeMux to support middleware 'groups' (like chi), and also a quick and simple alternative to alice for chaining middleware.

Panic! …or maybe not? 🤔 I've just published a new tutorial exploring and answering the question: When is it OK to panic in Go?

Give it a read at: alexedwards.net/blog/when-is...

I enjoyed writing this one, and it was good to clarify and codify how I've been using panics for a long time.

New tutorial now out: Mindset tips and practical advice for structuring your #golang projects.

👉 alexedwards.net/blog/11-tips...