Security Resources

Go is an excellent choice for building fast and scalable API's. The net/http package provides most of what you need, but augmented with the Gorilla Toolkit, you'll have an API up and running in no time. Learn how to build and secure a Go API with JSON Web Tokens and consume it via a modern UI built with React.

April 21, 2016

by Adnan Kukic

· 23,341 Views · 8 Likes

Using Spring Session for Concurrent Session Control in a Clustered Environment

How a new feature in Spring lets you manage sessions without relying on external repositories.

Updated April 20, 2016

by Joris Kuipers

· 30,351 Views · 17 Likes

Load Balancing of WebSocket Connections

The problem of WebSocket load balancing has always been a hot issue when managing large systems. This article takes a look at some possible solutions to that problem.

April 13, 2016

by Konstantin Shamko

· 73,333 Views · 6 Likes

Considering Tor-like Techniques to Protect Your Users

The Tor project lets users opt-out of the kind tracking and surveillance that happens invisibly and without informed consent.

April 11, 2016

by Rodrigo Kyle Mehren

· 10,442 Views · 3 Likes

Gradle Compile-only Dependencies

Compile-only dependencies can now be declared for all Java projects using the Java plugin from Gradle.

April 5, 2016

by Mark Vieira

· 20,835 Views · 4 Likes

JSON Web Token in Action With JAX-RS

A quick introduction to JWT and how to use it with JAX-RS for authentication.

March 30, 2016

by Abhishek Gupta

CORE

· 74,200 Views · 6 Likes

Custom Security With a Spring Boot/Elide Json API Server

Here's a look at security permissions that are applicable to JPA entities, controlling attributes like reading, deletion, updating, and assignment of entities.

March 16, 2016

by Matthew Casperson

· 6,344 Views · 2 Likes

Field Injection When Mocking Frameworks Fail

Learn more about field injection with mocking frameworks, and CDI in applications when unit testing Java classes.

March 14, 2016

by Ivo Woltring

· 23,185 Views · 11 Likes

MuleSoft Salesforce Connector: OAuth 2.0 JWT Bearer

Here's how to set up OAuth 2.0 JWT Bearer for simple Mulesoft Salesforce integration.

March 11, 2016

by Vince Soliza

· 20,037 Views · 10 Likes

@Autowired and Optional Dependencies

Are your injected dependencies required or optional? What about all the permutations of possibilities?

March 9, 2016

by Sebastian Malaca

· 23,654 Views · 8 Likes

Constructor or Setter?

When creating an object should we inject everything at construction time or specify optional attributes via setters.

February 26, 2016

by Sebastian Malaca

· 32,704 Views · 48 Likes

Kill Your Dependencies: Java/Maven Edition

Learn how to kill your dependencies in Java/Maven with these tips, like shooting for zero dependencies, and NOT including Spring.

February 23, 2016

by Sam Atkinson

· 42,776 Views · 36 Likes

SAML Single Sign-On With JBoss Wildfly and PicketLink

To enable SAML Single Sign-On in Wildfly, you also need to enable SSL for the inbound connection / call back when the users browser sends their token supplied by the Identity Provider to avoid man in the middle attacks. Read on for more information.

February 23, 2016

by Brett Crawley

· 17,109 Views · 7 Likes

Insights From Stackoverflow: Most Voted for Spring 4 Questions

Spring 4 is widely used, but as with any technology, there are loads of questions. Here are the most asked and answered questions on Stackoverflow, like differences in component and controller annotations, and what the Spring framework is actually used for.

February 20, 2016

by Alex Theedom

· 12,352 Views · 15 Likes

The Most Important Elements of Cloud-Based Applications

Scalability, security, cost savings, integration/connectivity, and stability/availability are all important elements of cloud-based applications.

February 18, 2016

by Tom Smith

CORE

· 9,109 Views · 3 Likes

Why Bug Injection Rates Matter

A new source of waste in code to examine: the bug injection rate, and what testing teams can do about it.

February 10, 2016

by Matthew Heusser

· 7,372 Views · 5 Likes

Implement Custom JMeter Samplers

Stress testing tools are much more necessary in today's environment of complex architecture. Apache JMeter is one of these awesome tools, offering great load-testing capabilities. Here's an example of implementing custom JMeter samplers!

February 9, 2016

by Emmanouil Gkatziouras

CORE

· 25,751 Views · 5 Likes

AES256 on Three Platforms: Using CryptoJS, PyCrypto, and CryptoSwift

Learn more about AES256 encryption and discover cross-platform decryption and encryption, with a look at CryptoJS.

February 4, 2016

by Chase Seibert

· 20,803 Views · 2 Likes

Single Sign-On Made Easy: SAML With Tomcat and PicketLink

Learn all about SAML single sign-on with PicketLink and Tomcat, including an investigation of how SAML single sign-on works, and overviews of Fediz, Tomcat, and PicketLink.

February 3, 2016

by Brett Crawley

· 48,209 Views · 11 Likes

Using Parameter Converters in JAX-RS

Here's how to use parameter converters in JAX-RS, with injection made simple, rules, and exceptional scenarios.

January 29, 2016

by Abhishek Gupta

CORE

· 24,587 Views · 6 Likes

The Latest Security Topics