Sorry, but you're way over engineering for this tiny app. No need for a database, or any back end we'd want to spend money or man hours on. There are posters and retrievers. Retrievers outnumber posters like 10 to one, but there will not even be dozens of concurrent requests, let alone hundreds or thousands. Posting adds or updates tiny data to a name-value pair collection, retrievers get some subset of entries from that name value pair collection matching certain criteria. Entries are culled when they're 90 seconds old, so that collection never gets huge...few hundred entries at most. Posts and requests will take a few milliseconds to complete. App does nothing with the data other than remember it for retrieval in that collection.
Being forced to single-threaded (1 concurrent request) was unexpected, but at least it saved me from coding in concurrency protection myself.
So now I have to ask, to what extent will my app be protected from junk requests that aren't actually from my users, e.g. bots, spiders, kids being stupid, etc.? I just don't want to get a $1000 invoice from garbage traffic. Can I put something in the HTTP headers such that any calls to the app missing that header are just discarded?
On Thursday, April 9, 2020 at 2:35:05 PM UTC-4, Phillip Pearson wrote: