Compare commits
No commits in common. "main" and "forge/iss-155aa95ea6df-attempt-2" have entirely different histories.
main
...
forge/iss-
4 changed files with 0 additions and 50 deletions
|
|
@ -1,3 +0,0 @@
|
|||
# SPRING-ARC-QUALITY-1783831207-attempt-2
|
||||
|
||||
Forge 이슈 작업 브랜치 `forge/SPRING-ARC-QUALITY-1783831207-attempt-2`.
|
||||
|
|
@ -1,3 +0,0 @@
|
|||
# iss-8fd82b653bff-attempt-1
|
||||
|
||||
Forge 이슈 작업 브랜치 `forge/iss-8fd82b653bff-attempt-1`.
|
||||
|
|
@ -1,35 +0,0 @@
|
|||
# ADR for Payment Boundary Definition
|
||||
|
||||
## Context
|
||||
|
||||
In the payment processing system, clarity and delineation of boundaries are critical for ensuring security, maintainability, and scalability. Understanding the interactions between different components that handle payment transactions will help manage risks associated with payment data and integrations with external systems.
|
||||
|
||||
The current system lacks a well-defined architecture for its payment processing boundaries. This has led to difficulties in isolating payment-related components, enforcing security measures, and integrating with third-party payment providers.
|
||||
|
||||
## Decision
|
||||
|
||||
1. **Establish Clear Payment Boundaries**:
|
||||
- Define a dedicated Payment Service responsible for handling all payment transactions.
|
||||
- Separate the payment logic from other business logic to adhere to the single responsibility principle.
|
||||
- The Payment Service will interact with external payment gateways, ensuring that sensitive payment data remains secure and encapsulated.
|
||||
|
||||
2. **Adopt Event-Driven Architecture**:
|
||||
- Introduce an event bus for communication between the Payment Service and other components (e.g., Order Service, Notification Service). This will allow for decoupled interactions and better scalability.
|
||||
- Utilize events such as `PaymentProcessed`, `PaymentFailed`, and `RefundProcessed` to notify other services about payment outcomes.
|
||||
|
||||
3. **Implement Strong Authentication and Authorization**:
|
||||
- All access to the Payment Service must go through an authentication layer, verifying the identity and permissions of the calling service.
|
||||
- Enforce strict access controls to sensitive payment processing endpoints.
|
||||
|
||||
## Alternatives
|
||||
|
||||
- **Tightly Coupled Monolithic Approach**: Keeping the payment logic embedded within a monolithic application, which would simplify communications at the cost of flexibility and security. Not recommended due to increased risk and reduced scalability.
|
||||
- **Using Microservices Without Boundaries**: Deploying multiple microservices interacting directly with each other without a clear Payment Service, leading to potential security vulnerabilities and a tangled codebase. Not recommended due to maintainability concerns.
|
||||
|
||||
## Consequences
|
||||
|
||||
Implementing these boundaries will lead to:
|
||||
- Increased security around payment processing, protecting sensitive customer data.
|
||||
- Improved maintainability, as the payment logic is separate from other business functionalities.
|
||||
- Greater scalability, with an event-driven model allowing for easier integration of additional services as needed.
|
||||
- Enhanced resilience through decoupling, allowing individual services to scale and handle failures independently.
|
||||
|
|
@ -1,9 +0,0 @@
|
|||
# Package Map
|
||||
|
||||
| Package | Responsibility | Forbidden Dependencies |
|
||||
|----------------|----------------------------------------------------|------------------------|
|
||||
| controller | Handle HTTP requests and responses | domain |
|
||||
| service | Business logic and transaction management | domain, integration |
|
||||
| repository | Data access and retrieval | service |
|
||||
| domain | Core domain logic and entities | controller, service, repository |
|
||||
| integration | External service communication | service |
|
||||
Loading…
Add table
Add a link
Reference in a new issue