Security Resources

Microservices Authentication and Authorization Using API Gateway

In this article, we'll learn how to add authorization and authentication security protocols to microservices by using an API Gateway.

Updated February 23, 2018

by Akash Bhingole

· 82,800 Views · 22 Likes

Stateless Authentication With JSON Web Tokens

Learn how to protect your microservice, API, or web app using JSON Web Tokens to create a stateless authentication protocol.

February 22, 2018

by Yos Riady

· 48,894 Views · 15 Likes

Spring DI Patterns: The Good, The Bad, and The Ugly

Let's explore the three ways Spring lets you declare dependencies using annotations: field injection, setter injection, and constructor injection.

February 21, 2018

by Roger Guldbrandsen

· 100,762 Views · 38 Likes

An OAuth2 Grant Selection Decision Tree for Securing REST APIs

In this article, I will explain the four types of grants and guidelines for selecting each grant based on a simple decision tree.

February 20, 2018

by Imesh Gunaratne

· 12,017 Views · 18 Likes

Spring Boot 2 Applications and OAuth 2: Setting Up an Authorization Server

A Java-based developer walks us through the process of setting up a working Authorization Server with a sample client and a sample user available.

Updated February 16, 2018

by Biju Kunjummen

· 39,867 Views · 31 Likes

Diameter Server Load Testing — A Guide

Learn how to use JMeter to load test Diameter, a AAA protocol similar to Radius, and understand why the two go hand in hand.

Updated February 9, 2018

by Konsantine Firsanov

· 11,412 Views · 3 Likes

Android WebView: Secure Coding Practices

A developer reviews some secure coding good practices for Android and web developers to keep in mind when developing for mobile platforms.

February 8, 2018

by Erez Yalon

· 29,365 Views · 5 Likes

Secure Your Vert.x Server With Single Sign-On From Okta

Let's take a dip into the Spring ecosystem while learning how to secure a Vert.x server and adding the convenience of SSO.

February 7, 2018

by Silas Brazil

· 6,867 Views · 8 Likes

Adding Auth to a Jaeger Collector

In this quick tutorial, you will learn how to add an authentication proxy to your Jaeger collector using Keycloak. Read on to get started!~

February 5, 2018

by Juraci Paixao Kroehling

· 9,666 Views · 5 Likes

CDI (Part 2): Qualifiers in Java: Polymorphism in DI

The second part of this CDI series considers CDI qualifiers. We'll see how they can help you with both dependency injection and polymorphism.

February 3, 2018

by Alexandre Gama

· 25,657 Views · 12 Likes

The Server Side Request Forgery Vulnerability and How to Prevent It

Learn how to protect your web application from SSRF vulnerabilities by learning what exactly they are and how bad actors can use them to target your system.

February 2, 2018

by Sven Morgenroth

· 52,368 Views · 1 Like

Build Authentication the Easy Way with Spring Security 5.0 and OIDC

Spring Security 5.0 offers a host of new tools for your authentication needs. Let's see how to use it and OIDC together to secure your Spring-based apps.

February 2, 2018

by Matt Raible

· 45,961 Views · 14 Likes

Parallelizing Tasks with Dependencies — Design Your Code to Optimize Performance

Learn how to run several asynchronous tasks concurrent with each other while respecting the dependencies surrounding each task.

January 30, 2018

by Riccardo Terrell

· 10,245 Views · 3 Likes

SQL Injection Vulnerabilities and How to Prevent Them

SQLi is one of the most common and severe vulnerabilities. Learn what you as a developer can do to prevent SQL injection attacks on your application.

January 29, 2018

by Sven Morgenroth

· 96,955 Views · 3 Likes

Microservices With Spring Boot, Part 1 — Getting Started

In the first installment of this series, we'll learn about the concept of microservices and look at how to create a microservice with Spring Boot and Spring Cloud.

January 23, 2018

by Ranga Karanam

· 87,108 Views · 53 Likes

User Personas and Pipeline Facades for Effective Release Decisions

This article discusses using user personas with CI/CD pipelines to learn which data your business needs, and the importance of how data is presented.

January 22, 2018

by Manuel Pais

· 13,031 Views · 3 Likes

Configuring Security Headers in Undertow

If you're interested in using security headers to help protect your websites, there are a number of approaches you can take. Let's explore some of the popular ones.

Updated January 21, 2018

by Bill O'Neil

· 9,001 Views · 4 Likes

OAuth 2.0 in a Nutshell

In this article, we take a look at one of the most popular frameworks for implementing authentication and authorization protocols.

Updated January 17, 2018

by Gitanjali Sahoo

· 16,580 Views · 18 Likes

If You're Going to Fail, Fail Safely

These insights into failure will help you think about planning for failure in your software to mitigate risk, and how to recover.

January 17, 2018

by Heidi Waterhouse

· 6,343 Views · 3 Likes

Bootstrapping Microservices - Getting Your Microservice Architecture Ready

Check out this open source project to get a start on your microservices architecture, learn about the tools you need to connect your microservices, and more.

January 17, 2018

by Alexsandro Souza

· 22,255 Views · 41 Likes

The Latest Security Topics