Blog
Practical guides on OAuth 2.0, OpenID Connect, SAML, Keycloak, and the platform engineering behind identity systems.
221 posts · page 7 of 12
Explore essential strategies for securing GraphQL endpoints with Spring Security, including effective authorization patterns and rate limiting techniques.
Part 1 · Secure Backend Architecture SeriesThis guide covers implementing a custom UserDetailsService in Spring Security, focusing on user loading mechanisms and caching strategies for enhanced security.
Part 1 · Machine Identity & DevSecOps SeriesExplore the mechanics of BCrypt, Argon2, and PBKDF2 within Spring Security for implementing secure password hashing in modern applications.
Part 15 · Spring Security Deep Dive SeriesLearn to implement distributed tracing and capture security metrics in Spring applications using OpenTelemetry for enhanced observability.
Part 14 · Spring Security SeriesLearn how to secure your GitOps pipelines and protect sensitive Kubernetes configuration data with tools like Sealed Secrets, SOPS, ArgoCD, and Flux.
Part 5 · Machine Identity & DevSecOps SeriesLearn how SPIFFE and SPIRE provide universal identity for services, enhancing security across Kubernetes and multi-cluster deployments.
Part 6 · Machine Identity & DevSecOps SeriesImplement zero trust strategies in your CI/CD pipeline to enhance supply chain security using ephemeral credentials and SLSA frameworks.
Part 7 · Machine Identity & DevSecOps SeriesA technical walkthrough of automating certificate lifecycles with cert-manager and Vault PKI, covering TLS management, rotation strategies, and Let's Encrypt integration.
Part 8 · Machine Identity & DevSecOps SeriesLearn essential strategies for managing API keys, including secure design principles, distribution workflows, and automated rotation techniques.
Part 9 · Machine Identity & DevSecOps SeriesThis guide covers SSH key management, certificates, and CA strategies to replace password authentication with effective security practices.
Part 3 · Infrastructure Security SeriesLearn how to configure Spring Security for LDAP authentication, enabling integration with Active Directory for enterprise user management.
Part 13 · Spring Security Deep Dive SeriesLearn how to implement distributed session management with Spring Session and Redis for high-performance applications.
Part 12 · Spring Security Deep Dive SeriesLearn how to migrate your application to Spring Security 6 and Spring Boot 3 with a focus on Jakarta EE compatibility and essential security changes.
Part 11 · Spring Security Deep Dive SeriesA walkthrough of testing strategies for Spring Security, covering MockMvc assertions, user mocking with @WithMockUser, and OAuth2 integration testing patterns.
Part 10 · Spring Security Deep Dive SeriesExplore the internals of Spring Security, focusing on how filters compose the SecurityFilterChain and drive the authentication process.
Part 2 · Spring Security Deep Dive SeriesA technical look at leveraging AWS WAF and Shield to secure web applications from Layer 7 threats and DDoS attacks.
Part 15 · AWS IAM & Cloud Security SeriesLearn how to properly configure Spring Security CORS and CSRF for SPAs, ensuring secure communication between frontend frameworks like Angular and backend services.
Part 9 · Spring Security Deep Dive SeriesLearn how to build an authentication system using Spring Security and JWT, including filter chains, refresh token handling, and blacklisting mechanisms for advanced applications.
Part 3 · Spring Security Deep Dive SeriesExplore advanced Spring Security extension techniques by building custom filters for API key authentication and complex security chains.
Part 7 · Spring Security Deep Dive SeriesLearn how to implement a secure multi-account AWS environment leveraging IAM policies, AWS Organizations, Control Tower, and Landing Zones for effective enterprise governance.
