Given a Go function called /api/[...path].go, all requests like /api/login, /api/user, etc. are routed correctly and handled by the function.
Alas, all routes three levels deep (/api/user/verify, /api/shizzle/{id}) instantly return a 404. They do not even show up in the logs.
In that regard, it looks like the platform handles Go functions with a wildcard name [...path] as if it was named just [path].
This looks like a bug to me.