Securing Spring Boot Microservices with JWT and Redis
Introduction to Application Security
Spring Security is a powerful framework designed to handle authentication and authorization within Java applications. In modern web architectures, security primarily revolves around two core concepts:
Authentication (AuthN): Verifying the identity of a user. This typically involves validating credentials su ...
Posted on Wed, 05 Aug 2026 16:48:49 +0000 by Templar
Implementing HTTP Request Interception with ASP.NET HttpModule
HttpModule Implementation
HttpModules provide functionality similar to ISAPI Filters in the ASP.NET pipeline. Development typically follows these steps:
Create a class implementing IHttpModule interface
Implement Init method with event registration
Define event handler methods
Optionally implement Dispose method for cleanup
Register the class ...
Posted on Mon, 27 Jul 2026 16:15:11 +0000 by TKirahvi
Integrating Spring Security for Token-Based Authentication and Authorization
1. Introduction to Spring Security
1.1 Framework Overview
Spring is a highly popular and successful Java application development framework. Spring Security, built upon the Spring framework, provides a comprehensive solution for web application security. Generally, web application security includes two parts: user authentication and user authori ...
Posted on Fri, 24 Jul 2026 16:28:33 +0000 by bobbyM
AAA Framework and Configuration Guide
Basic AAA Concepts
AAA (Authentication, Authorization, and Accounting) is a security management framework that provides mechanisms to verify user identities, control they access privileges, and monitor their network usage. It offers three essential security functions:
Authentication (Verify user identity)
Authorization (Determine user access r ...
Posted on Sat, 18 Jul 2026 17:12:21 +0000 by tomash
Implementing Authorization in Spring Security
Permission Expressions
Expression
Description
permitAll()
Always returns true, granting access to all users, authenticated or not.
denyAll()
Always returns false, denying access to everyone.
isAnonymous()
Returns true if the current user is anonymous (not logged in).
isRememberMe()
Returns true if the user was authenticated via a & ...
Posted on Sat, 11 Jul 2026 17:24:44 +0000 by boonika
Apache RocketMQ 4.9.8 Setup and ACL 1.0 Configuration
Downloading RocketMQ 4.9.8
Download the release package from the official reppository:
https://dist.apache.org/repos/dist/release/rocketmq/4.9.8/rocketmq-all-4.9.8-bin-release.zip
Extract it to a local directory such as: D:\dev\env\rocketmq-4.9.8
Configuring ACL 1.0 for Access Control
Official documentation: RocketMQ ACL Guide
- ACL 1.0 is dep ...
Posted on Wed, 01 Jul 2026 16:27:12 +0000 by pbeerman
Implementing Security in Spring Boot Applications with Spring Security
Introduction to Spring Security
Spring Security provides comprehensive security services for Java EE applications. As a core component of the Spring ecosystem, it implements layered security architecture where each application layer can be protected independently. This framework enables fine-grained access control at the controller, service, an ...
Posted on Sat, 20 Jun 2026 16:49:18 +0000 by RabPHP
Implementing Stateless Authentication with Spring Security and JWT
This guide explores how to implement custom authentication and authorization mechanisms using Spring Security combined with JWT tokens. The approach enables stateless authentication suitable for modern distributed applications and microservices architectures.
--- 1. Understending Spring Security's Built-in Authentication Flow
Before implementin ...
Posted on Sat, 13 Jun 2026 17:00:23 +0000 by crochk
Spring Security 5.7.5 Core Authentication and Authorization Setup
Project Dependencies
Include the following essential dependencies in a Spring Boot project:
spring-boot-starter-parent (parent POM)
spring-boot-starter-web
spring-boot-starter-security
spring-boot-starter-test (optional, for testing)
spring-security-test (opsional, for testing)
<?xml version="1.0" encoding="UTF-8"?>
...
Posted on Thu, 14 May 2026 22:41:33 +0000 by mepaco
Handling Location Permission Rejection and Subsequent Authorization in Mini Programs
When a user first accesses a page, the application calls wx.getLocation to request locatoin permissions. If the user denies the request, subesquent visits can check the current authorization status using wx.getSetting.
getLocation: function () {
var that = this;
wx.getLocation({
type: 'wgs84',
success: function (res) {
wx.setS ...
Posted on Thu, 14 May 2026 21:19:01 +0000 by davo666