In this post, I will share how I discovered CVE-2023–34035, a CVE Misconfiguration in the famous Spring Security Project. For those who are using Spring Boot to build and deploy their JVM applications, you have probably already encountered Spring Security. So the following snippet may ring a bell for you: …

Data Persistence allows applications to persist and retrieve information from non-volatile storage. In this environment, applications must either manage persistence themselves or use third-party solutions to handle database updates and retrievals. In this article, we explore Spring Data JPA, Spring Data R2DBC and Hibernate Reactive projects. The idea is to…

Data Persistence — The Reactive Approach — Vert.x provides a reactive client for PostgreSQL with a straightforward API focusing on scalability and low overhead. The client is reactive and non blocking, allowing to handle many database connections using a single thread achieved through Netty. Here is the content of this article: The Command Pattern Simple vs extended…

Unless you’ve been living in a cave for the past few years, you’ve probably heard of reactive programming. There are so many frameworks out there that have become so popular such as Spring Boot (WebFlux) that handle almost everything for you, you ‘only’ get to focus on your business logic. …

Introduction In the microservice era, where a complex application is decomposed into mutliple units that componentize, collaborate, and connect, services tends to have more and more business responsibilities tied to them which make difficulty of service goverance unprecedented. …

Strimzi is an open-source project that provides container images and Kubernetes operators for running Apache Kafka on Kubernetes. In this article, we take a closer look at how strimzi works behind the scenes. Content: Vert.x Kubernetes Informers Background Strimzi Operators User Operator Cluster operator Topic Operator Entity Operator 0. Vert.x Vert.x is is…

Introduction GraphQL is an open source query language created by Facebook as an alternative to the common REST architecture. It allows users to request specific data and thus avoids the classic over-fetching problem associated with REST. In this article, we aim to dicuss Spring for GraphQL, the successor of the GraphQL…

RSocket is fully reactive bi-directional binary communication protocol that tries to overcome few of the limitations of HTTP1 and HTTP2 by providing several features such as back-pressure, multiplexing and streaming. Throughout this article, we explore RSocket, the protocol, its features and its Java implementation https://github.com/rsocket/rsocket-java. Why not stick with REST ? Most of the time, when…

In this post, I provide a detailed explanation of CVE-2022–22965, providing the necessary background and a deep comprehensive understanding of the vulnerability. We aim to answer the following questions: What is CVE-2022–22965 ( how is it linked to CVE-2010–1622) ? Why does it affects only JDK9+? Why does it only…