9 min readBackendFeatured
Understanding HTTP Strict Transport Security (HSTS) for Identity Applications
Learn how to secure identity applications with HTTP Strict Transport Security (HSTS) and Spring Boot configurations to enforce HTTPS.
All tags
Tag
Spring Boot
Read 13 articles on Spring Boot by Ashish Srivastava — practical guides covering implementation patterns, security, and production lessons.
13 posts
10 min readBackendFeatured
Building a Self-Service Password Reset with Spring Boot and Keycloak
Learn how to build a secure self-service password reset mechanism with Spring Boot and Keycloak, covering required actions and identity management.
9 min readtechnicalFeatured
Building Multi-Factor Authentication with TOTP in Spring Boot
Learn how to secure your Spring Boot applications by integrating TOTP-based Multi-Factor Authentication with Google Authenticator for enhanced security.
8 min readtechnicalFeatured
Implementing Mutual TLS in Spring Boot Applications
Learn how to secure Spring Boot services using mutual TLS (mTLS) and X.509 certificate authentication without complex infrastructure overhead.
9 min readtechnicalFeatured
Implementing Risk-Based Authentication with Keycloak and Spring Boot
Learn how to build adaptive authentication flows with Keycloak and Spring Boot. This guide covers risk scoring, step-up auth, and custom authentication implementation.
9 min readBackendFeatured
Automating Access Reviews with Keycloak and Spring Boot
Learn how to automate access certification processes with Keycloak and Spring Boot for better compliance and identity governance.
10 min readBackendFeatured
Building a Developer Identity Portal with Spring Boot and Keycloak
Learn how to build a self-service identity portal leveraging Spring Boot and Keycloak for secure identity management and API access control.
9 min readDevelopmentFeatured
Spring Security 6 and Spring Boot 3: Migration Guide
Learn how to migrate your application to Spring Security 6 and Spring Boot 3 with a focus on Jakarta EE compatibility and essential security changes.
Part 11 · Spring Security Deep Dive Series
8 min readDevelopmentFeatured
Spring Security with JWT: Complete Authentication Implementation
Learn how to build an authentication system using Spring Security and JWT, including filter chains, refresh token handling, and blacklisting mechanisms for advanced applications.
Part 3 · Spring Security Deep Dive Series
9 min readDevelopmentFeatured
Keycloak and Spring Boot Integration: Advanced Patterns
Explore advanced Keycloak and Spring Boot integration with multi-tenant support and reactive streams for modern applications.
Part 4 · Keycloak Masterclass Series
8 min readBackendFeatured
Implementing OIDC Authentication in Spring Boot with Keycloak
Learn how to integrate OpenID Connect authentication into your Spring Boot application using Keycloak for secure user management.
Part 3 · OpenID Connect Deep Dive Series
8 min readBackendFeatured
Securing REST APIs with OAuth 2.0 Resource Server
Implement secure access for your Spring Boot applications by configuring an OAuth 2.0 Resource Server to validate JWT tokens and enforce scope-based access control.
10 min readBackendFeatured
Implementing OAuth 2.0 Client Credentials Flow for Microservices
Learn how to implement the OAuth 2.0 client credentials flow for secure service-to-service communication using Spring Boot OAuth2.
Part 3 · OAuth 2.0 Deep Dive Series