PoCAT Documentation Get Started

Filter Chain Setup

Filter chain order, performance SLO, and security notes.

Last updated: 2026-05-27 Section: Configuration

Filter order drives security, performance, and audit together. Wrong ordering causes auth bypass, latency, and missing logs.

Standard chain order

  1. Generate trace ID
  2. AuthN / AuthZ
  3. Input validation (schema)
  4. Transform / normalize
  5. Domain policy filters
  6. Audit logging

Performance SLO

FilterP95 targetWarning thresholdAction
Auth< 10ms> 20msToken cache, JWKS TTL
Validation< 8ms> 15msLighten schema
Transform< 12ms> 25msSplit mapping rules
Security Placing business transforms before Auth can expose payloads before authentication.