Security Resources

Using Spring Session for Concurrent Session Control in a Clustered Environment

How a new feature in Spring lets you manage sessions without relying on external repositories.

Updated April 20, 2016

by Joris Kuipers

· 30,498 Views · 17 Likes

The problem of WebSocket load balancing has always been a hot issue when managing large systems. This article takes a look at some possible solutions to that problem.

April 13, 2016

by Konstantin Shamko

· 73,489 Views · 6 Likes

Considering Tor-like Techniques to Protect Your Users

The Tor project lets users opt-out of the kind tracking and surveillance that happens invisibly and without informed consent.

April 11, 2016

by Rodrigo Kyle Mehren

· 10,519 Views · 3 Likes

Gradle Compile-only Dependencies

Compile-only dependencies can now be declared for all Java projects using the Java plugin from Gradle.

April 5, 2016

by Mark Vieira

· 20,919 Views · 4 Likes

JSON Web Token in Action With JAX-RS

A quick introduction to JWT and how to use it with JAX-RS for authentication.

March 30, 2016

by Abhishek Gupta

CORE

· 74,294 Views · 6 Likes

Custom Security With a Spring Boot/Elide Json API Server

Here's a look at security permissions that are applicable to JPA entities, controlling attributes like reading, deletion, updating, and assignment of entities.

March 16, 2016

by Matthew Casperson

· 6,453 Views · 2 Likes

Field Injection When Mocking Frameworks Fail

Learn more about field injection with mocking frameworks, and CDI in applications when unit testing Java classes.

March 14, 2016

by Ivo Woltring

· 23,280 Views · 11 Likes

MuleSoft Salesforce Connector: OAuth 2.0 JWT Bearer

Here's how to set up OAuth 2.0 JWT Bearer for simple Mulesoft Salesforce integration.

March 11, 2016

by Vince Soliza

· 20,289 Views · 10 Likes

@Autowired and Optional Dependencies

Are your injected dependencies required or optional? What about all the permutations of possibilities?

March 9, 2016

by Sebastian Malaca

· 23,791 Views · 8 Likes

Constructor or Setter?

When creating an object should we inject everything at construction time or specify optional attributes via setters.

February 26, 2016

by Sebastian Malaca

· 32,830 Views · 48 Likes

Kill Your Dependencies: Java/Maven Edition

Learn how to kill your dependencies in Java/Maven with these tips, like shooting for zero dependencies, and NOT including Spring.

February 23, 2016

by Sam Atkinson

· 42,923 Views · 36 Likes

SAML Single Sign-On With JBoss Wildfly and PicketLink

To enable SAML Single Sign-On in Wildfly, you also need to enable SSL for the inbound connection / call back when the users browser sends their token supplied by the Identity Provider to avoid man in the middle attacks. Read on for more information.

February 23, 2016

by Brett Crawley

· 17,232 Views · 7 Likes

Insights From Stackoverflow: Most Voted for Spring 4 Questions

Spring 4 is widely used, but as with any technology, there are loads of questions. Here are the most asked and answered questions on Stackoverflow, like differences in component and controller annotations, and what the Spring framework is actually used for.

February 20, 2016

by Alex Theedom

· 12,430 Views · 15 Likes

The Most Important Elements of Cloud-Based Applications

Scalability, security, cost savings, integration/connectivity, and stability/availability are all important elements of cloud-based applications.

February 18, 2016

by Tom Smith

CORE

· 9,200 Views · 3 Likes

Why Bug Injection Rates Matter

A new source of waste in code to examine: the bug injection rate, and what testing teams can do about it.

February 10, 2016

by Matthew Heusser

· 7,466 Views · 5 Likes

Implement Custom JMeter Samplers

Stress testing tools are much more necessary in today's environment of complex architecture. Apache JMeter is one of these awesome tools, offering great load-testing capabilities. Here's an example of implementing custom JMeter samplers!

February 9, 2016

by Emmanouil Gkatziouras

CORE

· 25,977 Views · 5 Likes

AES256 on Three Platforms: Using CryptoJS, PyCrypto, and CryptoSwift

Learn more about AES256 encryption and discover cross-platform decryption and encryption, with a look at CryptoJS.

February 4, 2016

by Chase Seibert

· 20,878 Views · 2 Likes

Single Sign-On Made Easy: SAML With Tomcat and PicketLink

Learn all about SAML single sign-on with PicketLink and Tomcat, including an investigation of how SAML single sign-on works, and overviews of Fediz, Tomcat, and PicketLink.

February 3, 2016

by Brett Crawley

· 48,400 Views · 11 Likes

Using Parameter Converters in JAX-RS

Here's how to use parameter converters in JAX-RS, with injection made simple, rules, and exceptional scenarios.

January 29, 2016

by Abhishek Gupta

CORE

· 24,666 Views · 6 Likes

The Java Security Manager: Why and How?

You've got questions, we've got answers: Learn more about Java security manager, including how code compiles, if it runs, and what it displays. Then we'll probe the why and how.

January 20, 2016

by Nicolas Fränkel

· 26,816 Views · 11 Likes

The Latest Security Topics