Social Media Ideas for Spring Security

Designing Secure REST APIs With Spring Boot

Most Spring Boot APIs I’ve reviewed have a security configuration that was correct three commits ago. Then somebody added a new endpoint, the security config didn’t get the matchin...

Security Baked Into the JVM: two Subjects, one call

The constraint system stops a bad call before it leaves the JVM. The Safe Codebase Audit Pipeline stops bad code before a client ever loads it. What remains is identity: who is cal...

Spring Security: дополнение к JWT токенам

Всех приветствую!Данная статья будет посвящена довольно важным вещам, таким как: refreshtoken, метод-уровневой безопасности и примеру реализации правила "свой/чужой профиль" Читать...

Implementing and Testing a Spring MVC HandlerInterceptor

In a Spring MVC application, interceptors provide a powerful mechanism to execute custom logic before and after processing HTTP requests. They are commonly used for cross-cutting c...

Implementing Authorization Using jCasbin

Modern applications require a robust security mechanism to ensure that users can access only the resources they are authorized to use. While authentication verifies a user’s identi...

Spring Dynamic Authorization Scopes Example

Modern enterprise applications often require fine-grained access control where different users, clients, and business scenarios need different levels of permissions. OAuth 2.0 scop...

Spring Security: работа с JWT токенами

Всем привет! Данная статья посвящена регистрации и аутентификации с помощью JWT что помогает нам избавиться от тяжёлых сессий и куки и быть более крутыми и современными разработчик...

HTTP Client SSRF Mitigation with InetAddressFilter in Spring Boot

Learn how to use the InetAddressFilter class in a Spring-based application to limit the address that an HTTP client can call. The post HTTP Client SSRF Mitigation with InetAddress...

Critical Spring Security LDAP Flaw Lets Remote Attackers Read and Modify Directory Data

A critical vulnerability has been identified in the embedded UnboundID LDAP server within Spring Security. This flaw could allow remote attackers to authenticate using a well-known...

Testing Spring MVC HandlerInterceptor

Learn how to test Spring MVC HandlerInterceptor using @WebMvcTest and MockMvc without starting the full application. The post Testing Spring MVC HandlerInterceptor first appeared...

Security Baked Into the JVM: the Safe Codebase Audit Pipeline

In Part 1, the minimal deployment showed constraints traveling with the proxy: authentication, encryption, hardened deserialization, all declared in configuration and enforced at t...

Access Request and Response Body in HandlerInterceptor

In a Spring Boot application, we sometimes need to inspect or log the HTTP request body and response body. This can be useful for debugging, auditing, troubleshooting, or request-r...

A Security Collection for the Security Chapter

Security Baked Into the JVM: sixteen Subjects on the wire

Alice calls the order service. The order service calls the ledger on her behalf. At the second hop, the ledger has to decide whose authority the debit is being made under. Most s...

How to Get The RequestBody and ResponseBody in HandlerInterceptor

Learn how to log HTTP request and response bodies using a Spring MVC HandlerInterceptor. The post How to Get The RequestBody and ResponseBody in HandlerInterceptor first appeared...

Spring AOP Tutorial | Simplilearn

In this tutorial on Spring AOP, we are going to discuss AOP (Aspect Oriented Programming) with Spring, and learn how to use this powerful and widely used tool in practical scenario...

Article: Post-Quantum Cryptography in Spring Boot: Four Patterns You Can Ship This Sprint

There are four patterns that bring PQC into a Spring Boot fleet: encrypting payloads between services, locking down database fields, signing documents that need to hold up for deca...

Spring News Roundup: First Milestone Releases for Boot, Framework, Data, Security, Modulith, Batch

After a 10-week hiatus since the last batch of Spring ecosystem releases, there was a flurry of activity during the week of August 17th, 2026, highlighting first milestone releases...

Streamlined Security Management with VMware SSP 5.2

Embracing Zero Trust in the AI Era: VMware vDefend SSP 5.2 and the Integration of Cybersecurity Frameworks <p>As enterprise private</p>

VMware Tanzu Spring Delivers SLSA L3 Compliant Java Dependencies for Spring Boot 2.7.x, 3.x, and 4.x

<div><img width="300" height="157" src="https://blogs.vmware.com/wp-content/uploads/2026/07/Spring_blogtile_lightangle_v2-1.png" class="...

MCP Logging in Spring AI

Learn about MCP logging in Spring AI, both in an MCP server and a client. The post MCP Logging in Spring AI first appeared on Baeldung.       

How Spring Proxies Actually Work — And the Four Cases Where They Silently Don’t

A deep-dive into how @Transactional, @Cacheable, and @Async use CGLIB or JDK dynamic proxies — and the four well-known failure modes that swallow the annotation silently with no er...

Simplify Security Visibility with Security Center Essentials

Simplify Salesforce security with Security Center Essentials. Learn how to track Health Check scores, audit integrations, and monitor IP ranges in one place.

Role-Based Access Control in Node.js with JWT

Role-Based Access Control (RBAC) is a fundamental security pattern used to restrict system access based on user roles. When combined with JSON Web Tokens (JWT), it enables stateles...