Pedestal 0.8.1

Apply the Clojure 1.12 prompt, including its Java 25 baseline, first. These rules cover Pedestal 0.8.1 connectors, the legacy service API, routes, interceptors, browser security, resource serving, and asynchronous protocols.

Connector and route policy

• Build the production interceptor stack explicitly with io.pedestal.connector/with-interceptor or with-interceptors and with-routes. default-connector-map starts with an empty :interceptors vector; with-default-interceptors is a development starting point, not a complete application security policy.
• Construct route specifications and interceptor representations only from trusted code. Pedestal's IntoInterceptor conversion can resolve symbols and evaluate list forms; never feed client-supplied configuration into route expansion or interceptor conversion.
• Place response-security interceptors before the application error handler, and that handler before parsers and other rejecting components, so handled errors still receive security headers. Attaching a valid :response stops the remaining :enter queue; :leave runs in reverse order only for interceptors already entered. Check early denials, CORS preflights, missing routes, and parser failures as well as successful responses.
• Store verified identity and tenant data in server-owned request keys. Put authorization in route or table :interceptors before handlers; authorize the effective method and concrete resource after path-params-decoder has decoded :path-params. with-routes installs that decoder after routing; avoid decoding those values