Blog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
268 posts · page 1 of 14
Learn how to configure Spring Security for X.509 client certificate authentication, handling mutual TLS, principal extraction, and user lookup.
Part 4 · mTLS With Spring BootA guide to managing certificate rotation and truststore reloads in Kubernetes using cert-manager, ensuring secure mTLS configurations.
Part 6 · mTLS With Spring BootExplore the core components of Keycloak architecture, including realms, clients, and the data model, tailored for platform and identity engineers.
Part 1 · Keycloak in ProductionLearn how to implement TLS and mTLS in Spring Boot applications using modern SSL bundle configurations and client authentication settings.
Part 3 · mTLS With Spring BootUnexpected AWS Secrets Manager bills often stem from high API call volumes. Learn how caching and consolidation can reduce costs.
Part 5 · AWS Secrets and Key ManagementUnderstand the core differences between TLS and mTLS, including how mutual authentication works with keystores and truststores in backend systems.
Part 1 · mTLS With Spring BootLearn how to replace the deprecated WebSecurityConfigurerAdapter with the new SecurityFilterChain bean pattern in Spring Boot 3.
Part 7 · Spring Security Filter Chain MasteryA technical walkthrough for platform engineers and SREs on deploying SSH certificate authorities, managing short-lived keys, and centralizing authentication for secure infrastructure.
Part 6 · Machine Identity and Workload AuthLearn how to securely manage API keys through rotation, storage, and monitoring strategies tailored for backend and platform engineering teams.
Part 5 · Machine Identity and Workload AuthLearn how to manage authentication context in reactive streams with ReactiveSecurityContextHolder and JWT tokens in Spring WebFlux.
Part 6 · Spring Security Filter Chain MasteryLong-lived secrets are a security liability. Learn how shifting to short-lived, ephemeral credentials mitigates risk, reduces secret sprawl, and strengthens workload authentication.
Part 4 · Machine Identity and Workload AuthA walkthrough on configuring AWS Lambda to automatically rotate secrets in Secrets Manager, ensuring database credentials remain secure and up-to-date.
Part 4 · AWS Secrets and Key ManagementLearn how SPIFFE and SPIRE enable secure workload identity through SVIDs and attestation, essential for platform and security engineers.
Part 3 · Machine Identity and Workload AuthUnderstand every field in the RFC 8414 metadata document. This guide covers issuer, authorization_endpoint, token_endpoint, and scopes_supported for identity engineers.
Part 2 · Authorization Server Metadata (RFC 8414)Explore how X.509 certificates and mutual TLS establish secure service identities, ensuring secure communication between backend services.
Part 2 · Machine Identity and Workload AuthWhy machine identity is the bigger problem in modern security. Explore the challenges of non-human identity, workload authentication, and the need for accurate inventory.
Part 1 · Machine Identity and Workload AuthWhy should you use OncePerRequestFilter instead of GenericFilterBean for JWT? This guide covers async dispatch handling, duplicate execution risks, and best practices.
Part 4 · Spring Security Filter Chain MasteryLearn how to successfully transition your current users to passwordless authentication with a focus on enrollment, adoption, and a smooth rollout.
Part 6 · Passwordless AuthenticationA clear comparison of AWS KMS and Secrets Manager, explaining how each service handles encryption keys and sensitive data differently.
Part 3 · AWS Secrets and Key ManagementExplore the technical architecture of biometric authentication, covering fallback mechanisms, accessibility considerations, and secure user verification strategies.
Part 5 · Passwordless Authentication
