kotlin-ktor-patterns

Install the Authentication plugin with a jwt provider, configure a verifier using HMAC256 with your secret, issuer, and audience, then validate the credential payload. Wrap protected routes in an authenticate("jwt") block and extract claims via JWTPrincipal.

Define routes as extension functions on Route in separate files, then register them inside a central configureRouting function. Group endpoints with route("/path") blocks and separate public routes from authenticated ones using the authenticate block.

Yes, install the Koin plugin in your Application module and register modules containing singletons for repositories and services. Access dependencies inside route handlers using the by inject<T>() delegate.

Use the testApplication block, configure your application modules inside it, and create a client with ContentNegotiation installed. Send requests with client.get or client.post and assert on response status and deserialized bodies.

Without the StatusPages plugin, unhandled exceptions produce default HTML error pages. Install StatusPages and register exception handlers for specific types like IllegalArgumentException and Throwable to return structured JSON error responses.