Microservices for the Masses with Spring Boot, JHipster, and JWT - Devoxx UK 2017

Jun 22, 20170 likes233 views

Microservices are all the rage and being deployed by many Java Hipsters. If you’re working on a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. You'll see how to use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Heroku, Kubernetes, Docker, ELK, Spring Cloud, Okta; there will be plenty of interesting demos to see!

Microservices for the Masses with Spring Boot, JHipster, and JWT - Devoxx UK 2017

Conway’s Law
Any organization that designs a system (deﬁned
broadly) will produce a design whose structure is a copy
of the organization’s communication structure.
Melvyn Conway 1967

You shouldn’t start with a microservices architecture.
Instead begin with a monolith, keep it modular, and split
it into microservices once the monolith becomes a
problem.
Martin Fowler March 2014

Microservices are awesome, but they’re not free.
Les Hazlewood Stormpath CTO

Securing Your API
Choose the Right API Security Protocol
Basic API Authentication with TLS (aka SSL)
OAuth 1.0a, OAuth 2.0, OpenID Connect
API Keys vs. Username/Password Authentication
Store Your API Security Key securely
Use globally unique IDs (e.g. Url62)
Avoid sessions, especially in URLs

Create a JWT in Java
String jwt = Jwts.builder()
.setSubject("users/TzMUocMF4p")
.setExpiration(new Date(1300819380))
.claim("name", "Robert Token Man")
.claim("scope", "self groups/admins")
.signWith(
SignatureAlgorithm.HS256,
"secret".getBytes("UTF-8")
)
.compact();

Validating a JWT
String jwt = // get JWT from Authorization header
Jws<Claims> claims = Jwts.parser()
.setSigningKey("secret".getBytes("UTF-8"))
.parseClaimsJws(jwt)
String scope = claims.getBody().get("scope")
assertEquals(scope, "self groups/admins");

Better Secret
String b64EncodedSecret =
"Yn2kjibddFAWtnPJ2AFlL8WXmohJMCvigQggaEypa5E=";
.signWith(SignatureAlgorithm.HS256,
TextCodec.BASE64.decode(b64EncodedSecret))

JHipster by the numbers
+250 contributors
+6800 Github stars
+480,000 installations
+150 companies ofﬁcially using it

How to use JHipster
To install JHipster, you run an npm command:
$ npm install -g generator-jhipster
$ mkdir myapp && cd myapp
$ yo jhipster

What’s Generated?
Spring Boot application
Angular application
Liquibase changelog ﬁles
Conﬁguration ﬁles

Security Screens
Several generated screens
Login, logout, forgot password
Account management
User management
Useful for most applications
Pages must be tweaked
User roles will be added/extended
Provides good examples of working screens
Forms, directives, validation…

Admin Screens
Monitoring
Health
Spring Boot conﬁguration
Spring Security audits
Log management
Very useful in production

JHipster on Google Cloud
https://youtu.be/dgVQOYEwleA

Microservices are not free, but you get a deep discount
on microservices with JHipster.
Matt Raible 2016

JHipster.next
JHipster CLI
gRPC Support
React Support
Spring 5 and Reactive
Improved Kafka Support

Do one thing and do it well.
Unix philosophy

This Presentation and Demos
https://github.com/mraible/microservices-for-the-masses

Image Credits
Fountain of colours - Paulius Malinovskis on Flickr
Ponte dell’Accademia at Sunrise - Trey Ratcliff on Stuck in Customs
Conway’s Law - Martin Fowler and James Lewis on Microservices
Good Morning Denver - Sheila Sund on Flickr
Monoliths - Arches National Park on Flickr
Mexico - Trish McGinity on McGinity Photo
Future - vivianhir on Flickr
Spring Runoff - Ian Sane on Flickr
The memory Seeker, Santa Monica Pier, CA - Pacheco on Flickr
San Francisco By Night - Trish McGinity on McGinity Photo

Microservices are all the rage and being deployed by many Java Hipsters. If you’re working on a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. We’ll use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Docker, ELK, Spring Cloud, Okta; there will be plenty of interesting demos to see!

Building a PWA with Ionic, Angular, and Spring Boot - GeeCON 2017Matt Raible

In this session, I show how to build a Progressive Web App (PWA) using Ionic, Angular, and Spring Boot. PWAs are being hyped as the next big thing in mobile development. This talk will cut through the hype and get down to the nitty-gritty. Are they really better than native applications? Can you develop PWAs and easily target mobile and desktop with the same application? Tutorial used for demo: http://developer.okta.com/blog/2017/05/17/develop-a-mobile-app-with-ionic-and-spring-boot Source code: https://github.com/oktadeveloper/spring-boot-ionic-example

Front End Development for Back End Developers - Devoxx UK 2017Matt Raible

Are you a backend developer that’s being pushed into front end development? Are you frustrated with all JavaScript frameworks and build tools you have to learn to be a good UI developer? If so, this session is for you! We’ll explore the tools of the trade for fronted development (npm, yarn, Gulp, Webpack, Yeoman) and learn the basics of HTML, CSS, and JavaScript. We’ll dive into the intricacies of Bootstrap, Material Design, ES6, and TypeScript. Finally, after getting you up to speed with all this new tech, we’ll show how it can all be found and integrated through the fine and dandy JHipster project.

What's New in JHipsterLand - Devoxx Poland 2017Matt Raible

JHipster is an application generator that allows you to create monoliths or microservices, based on Spring Boot and Angular. It leverages Spring Cloud for microservices and contains best-of-breed JavaScript and CSS libraries for creating your UI. In this session, you’ll learn about what’s new in JHipster. Topics include Angular 4, Progressive Web Apps, HTTP/2, JUnit 5 and Spring 5. Monolith Demo: https://github.com/mraible/jhipster4-demo/blob/master/README.adoc Microservices Demo: https://developer.okta.com/blog/2017/06/20/develop-microservices-with-jhipster

Java REST API Comparison: Micronaut, Quarkus, and Spring Boot - jconf.dev 2020Matt Raible

Matt Raible compares the Java web frameworks Micronaut, Quarkus, and Spring Boot for building REST APIs. He demonstrates how to quickly get started with each framework, secure APIs with OAuth 2.1 and JWTs, build Docker images, and go native with GraalVM. Performance tests show Quarkus has the fastest startup time while Spring Boot has the largest community support in areas like Stack Overflow questions, GitHub stars, and jobs on Indeed.

Front End Development for Back End Developers - UberConf 2017Matt Raible

Are you a backend developer that’s being pushed into front end development? Are you frustrated with all JavaScript frameworks and build tools you have to learn to be a good UI developer? If so, this session is for you! We’ll explore the tools of the trade for frontend development (npm, yarn, Gulp, Webpack, Yeoman) and learn the basics of HTML, CSS, and JavaScript. This presentation dives into the intricacies of Bootstrap, Material Design, ES6, and TypeScript. Finally, after getting you up to speed with all this new tech, I'll show how it can all be found and integrated through the fine and dandy JHipster project.

Bootiful Development with Spring Boot and Angular - Spring I/O 2017Matt Raible

To simplify development and deployment, you want everything in the same artifact, so you put your Angular app “inside” your Spring Boot app, right? But what if you could create your Angular app as a standalone app and make cross-origin requests to your API? A client app that can point to any server makes it easy to test your current client code against other servers (e.g. test, staging, production). This workshop shows how to develop with Java 8, Spring Boot, Angular 4, and TypeScript. You’ll learn how to create REST endpoints with Spring MVC, Spring Data REST, configure Spring Boot to allow CORS, and create an Angular app to display its data. If time allows we’ll cover microservices, security/authentication, continuous integration, and deployment to Cloud Foundry. Prerequisites: Java 8, Maven 3.5.0, Node.js 6.9.5, Chrome (higher versions ok) Install Angular CLI: npm install -g @angular/cli Optional: Yarn instead of npm Tutorial used for workshop: http://developer.okta.com/blog/2017/04/26/bootiful-development-with-spring-boot-and-angular

Spring Boot Tutorial | Microservices Spring Boot | Microservices Architecture...Edureka!

Microservices for the Masses with Spring Boot, JHipster, and OAuth - South We...Matt Raible

The document summarizes a presentation about microservices using Spring Boot, JHipster, and OAuth. It includes an agenda that covers an introduction to microservices, developing microservices with JHipster, and deploying microservices to the cloud. It then describes demos of creating microservices using Spring Boot and Spring Cloud and consuming APIs using Feign clients in a gateway. Finally, it discusses JHipster's features for microservices and progressive web applications, as well as the JHipster roadmap.

The Ultimate Getting Started with Angular Workshop - Devoxx UK 2017Matt Raible

This document contains a presentation on Angular by Matt Raible. It begins with an introduction of Matt Raible and his background. It then covers various topics related to Angular including getting started, authentication standards, jobs data, Google Trends data, building Hello World apps in AngularJS and Angular, choices in Angular 2+, ES6/TypeScript, components, forms, data architectures, style guides, projects, testing, and authentication. It includes code samples and encourages learning by doing labs and projects.

Reactive Java Microservices with Spring Boot and JHipster - Denver JUG 2021Matt Raible

Microservice architectures are all the rage in JavaLand. They allow teams to develop services independently and deploy autonomously. Why microservices? IF you are developing a large/complex application AND you need to deliver it rapidly, frequently, and reliably over a long period of time THEN the Microservice Architecture is often a good choice Reactive architectures are becoming increasingly popular for organizations that need to do more, with less hardware. Reactive programming allows you to build systems that are resilient to high loads. In this session, I'll show you how to use JHipster to create a reactive microservices architecture with Spring Boot, Spring Cloud, Keycloak, and run it all in Docker. You will leave with the know-how to create your own resilient apps! Related blog post: https://developer.okta.com/blog/2021/01/20/reactive-java-microservices YouTube demo: https://youtu.be/clkEUHWT9-M YouTube recording: https://youtu.be/8OuZMFyh0xE GitHub repo: https://github.com/oktadev/java-microservices-examples/tree/main/reactive-jhipster

Security Patterns for Microservice Architectures - Oktane20Matt Raible

Matt Raible presented 11 security patterns for microservice architectures: 1) be secure by design, 2) scan dependencies, 3) use HTTPS everywhere, 4) use access and identity tokens, 5) encrypt and protect secrets, 6) verify security with delivery pipelines, 7) slow down attackers, 8) use Docker rootless mode, 9) use time-based security, 10) scan Docker and Kubernetes configurations for vulnerabilities, and 11) know your cloud and cluster security. He discussed each pattern in detail and provided examples and recommendations for implementation.

Grails Spring BootTO THE NEW | Technology

This tutorial is about Spring Boot. The tutorial includes an introduction to Spring Boot, key features of Spring Boot, prototyping using CLI, managing profiles aka environment in Grails, using GORM and using GSP. The tutorial begins with a section which is an introduction to Spring Boot. It includes an introduction to Spring Boot, the benefits of using Spring Boot. Following is a features section which includes the key features of Spring Boot like embedded servers, security, metrics etc. Next is a section about prototyping. It includes prototyping using CLI, getting started, the things that happen during prototyping, starter POMs and a demo, building Gradle, using plugin and adding dependencies, and hot reloading. Consecutively there is a section about managing profiles. It includes managing profiles aka managing environment in Grails like binding properties and its examples, using spring data to add dependency. Moreover, there's also a section which includes using GORM for next level persistence and also includes server side view template libraries like JSP, velocity, tiles, GSP etc. The last section of this tutorial is about GSP. It includes using GSP with Spring Boot as it has limited tags, adds dependency and helps in packaging executable JAR and WAR files.

Bootiful Development with Spring Boot and React - RWX 2017Matt Raible

To simplify development and deployment, you want everything in the same artifact, so you put your React app “inside” your Spring Boot app, right? But what if you could create your React app as a standalone app and make cross-origin requests to your API? A client app that can point to any server makes it easy to test your current client code against other servers (e.g. test, staging, production). This session shows how to develop with Java 8, Spring Boot, React, and TypeScript. You’ll learn how to create REST endpoints with Spring MVC, configure Spring Boot to allow CORS, and create an React app to display its data. If time allows we’ll cover authentication with OpenID Connect and deployment to Cloud Foundry. Blog post: https://developer.okta.com/blog/2017/12/06/bootiful-development-with-spring-boot-and-react Demo app: https://github.com/oktadeveloper/spring-boot-react-example

Bootiful Development with Spring Boot and Angular - Connect.Tech 2017Matt Raible

Intro to Spring Boot and Angular presentation from JHipster 4 Workshop on Connect.Tech 2017. To simplify development and deployment, you want everything in the same artifact, so you put on your Angular app "inside" and your Spring Boot app, right? But what if you could create your Angular app as a standalone app and make cross-origin requests to your API? This session shows how to develop with Java 8, Spring Boot, Angular 4, and TypeScript. You'll learn how to create REST endpoints with Spring MVC, Spring Data REST, configure Spring Boot to allow CORS, and create an Angular app to display its data.

Bootiful Development with Spring Boot and React - SpringOne 2017Matt Raible

Bootiful Development with Spring Boot and React - Richmond JUG 2018Matt Raible

To simplify development and deployment, you want everything in the same artifact, so you put your React app “inside” your Spring Boot app, right? But what if you could create your React app as a standalone app and make cross-origin requests to your API? A client app that can point to any server makes it easy to test your current client code against other servers (e.g. test, staging, production). This session shows how to develop with Java 8, Spring Boot, React, and TypeScript. You’ll learn how to create REST endpoints with Spring MVC, configure Spring Boot to allow CORS, and create a React app to display its data. If time allows we’ll cover authentication with OpenID Connect and deployment to Cloud Foundry. Blog: https://developer.okta.com/blog/2017/12/06/bootiful-development-with-spring-boot-and-react YouTube: https://youtu.be/P6rwKHnXUJI

Get Hip with Java Hipster - JavaOne 2017Matt Raible

Building a modern web application requires a lot of tools, frameworks, and techniques. This session shows how JHipster unites popular frameworks such as Angular, Spring Boot, and Bootstrap. Learn how Yeoman, a scaffolding tool for modern web apps, works with JHipster to generate a project that uses Java 8, SQL or NoSQL databases, Spring profiles, Maven or Gradle, Webpack, WebSockets, and BrowserSync. It also supports a number of different authentication mechanisms, including classic session-based auth, OAuth 2.0, and JWT-based authentication. For production deployments, JHipster includes out-of-the-box support for AWS, Cloud Foundry, Heroku, Docker, and Kubernetes.

Choosing a Java Web FrameworkWill Iverson

Java Web Application Security - UberConf 2011Matt Raible

During this presentation, I demonstrate how to implement authentication in your Java web applications using good ol' Java EE Container Managed Authentication, Spring Security and Apache Shiro. You'll also learn how to secure your REST API with OAuth and lock it down with SSL. After learning how to develop authentication, I'll introduce you to pentest your app, as well as OWASP, the OWASP Top 10, its Testing Guide and its Code Review Guide. Much of this talk is contained in demos and tutorials, which are available on my blog at http://raibledesigns.com/rd/tags/security and http://youtube.com/mraible.

Spring bootShatrughna Singh

Spring Boot is a framework that simplifies building standalone applications and provides tools to automate configuration and add features like embedded servers. It aims to reduce the amount of configuration and code needed to build an application. Spring Boot can help developers build applications faster and with less code. It provides defaults and auto-configuration that allow applications to get started quickly without needing to define extensive configuration files or annotations.

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...Matt Raible

In this session, I show how to build a Progressive Web App (PWA) AND a mobile app using Ionic, Angular and JHipster. PWAs are being hyped as the next big thing in mobile development. This talk describes the trials and tribulations of developing the Ionic Module for JHipster. It will show how you can easily generate Ionic UIs and describe the pain points of working with Node and Yeoman to develop this module. My Dev Story about Ionic for JHipster on YouTube: https://www.youtube.com/watch?v=B7TjR_rJVeU

Micro FrontendsSpyros Ioakeimidis

A micro frontend architecture is an approach to developing web applications as a composition of small frontend apps. Instead of writing a large monolith frontend application, the application can be broken down into domain-specific micro frontends, which are self-contained and can be developed and deployed independently. Each micro frontend can be owned by verticalised domain specific teams. Micro frontends do have advantages and disadvantages and they are not suitable in many cases. When micro frontends is a potential solution, make sure to use a domain driven top-down approach, with no big design upfronts. Keep it simple! Frontend Developer Love Amsterdam - 30 January 2018

Seven Simple Reasons to Use AppFuseMatt Raible

AppFuse is an open source project/application that uses best-of-breed Java open source tools to help you develop web applications quickly and efficiently. Not only does it provide documentation on how to develop light-weight POJO-based applications, it includes features that many applications need out-of-the-box: authentication and authorization, remember me, password hint, skinnability, file upload, Ajax libraries, signup and SSL switching. This is one of the main features in AppFuse that separates it from the other "CRUD Generation" frameworks like Ruby on Rails, Trails and Grails. AppFuse is already an application when you start using it, which means code examples are already in your project. Furthermore, because features already exist, the amount of boiler-plate code that most projects need will be eliminated. In this session, you will learn Seven Simple Reasons to Use AppFuse. If you don't use it to start your own projects, hopefully you will see that it provides much of the boiler-plate code that can be used in Java-based web applications. Since it's Apache Licensed, you're more than welcome to copy/paste any code from it into your own applications. Also see article published at: http://www.ibm.com/developerworks/java/library/j-appfuse/index.html

Front End Development for Back End Developers - vJUG24 2017Matt Raible

How to Win at UI Development in the World of Microservices - THAT Conference ...Matt Raible

You've figured out how to split up your backend services into microservices and scale your teams to the moon! But what about the front-end? Are you still building monoliths for your UI? This session will talk about the history of web frameworks, the microservices explosion, and techniques + frameworks for complementing your microservices with micro frontends. It'll include developer stories from folks implementing micro frontends and recommendations for learning more about them.

Spring Bootkoppenolski

Choose Your Own Adventure with JHipster & Kubernetes - Utah JUG 2020Matt Raible

Remember the choose your own adventure books that you used to read as a kid? This session is a reincarnation of a choose your own adventure book as a conference talk! You'll learn about Spring Boot, Docker, and Kubernetes in this talk, along with the choices you make in the following areas: * What kind of application architecture to build? Monolith or microservices? * Would you like to use Java or Kotlin? * MySQL, PostgreSQL, or MongoDB? * Spring MVC or Spring WebFlux? * Angular, React, or Vue.js? * PWA or mobile app? * Istio with Kubernetes or Kubernetes without Istio? GitHub repos of demos: * Monolith: https://github.com/mraible/healthy-hipster * Microservices: https://github.com/mraible/ujug-microservices

Microservices for the Masses with Spring Boot, JHipster, and OAuth - Utah JUG...Matt Raible

Microservices are all the rage and being deployed by many Java Hipsters. If you’re working with a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. We’ll use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Heroku, Kubernetes, Docker, ELK, Spring Cloud, Okta; there will be plenty of interesting demos to see!

Microservices for the Masses with Spring Boot, JHipster, and JWT - Rich Web 2016Matt Raible

Microservices are all the rage and being deployed by many Java Hipsters. If you’re working on a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. We’ll use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Heroku, Kubernetes, Docker, ELK, Spring Cloud, Stormpath; there will be plenty of interesting demos to see!

More Related Content

What's hot (20)

Microservices for the Masses with Spring Boot, JHipster, and OAuth - South We...Matt Raible

The Ultimate Getting Started with Angular Workshop - Devoxx UK 2017Matt Raible

Reactive Java Microservices with Spring Boot and JHipster - Denver JUG 2021Matt Raible

Security Patterns for Microservice Architectures - Oktane20Matt Raible

Grails Spring BootTO THE NEW | Technology

Bootiful Development with Spring Boot and React - RWX 2017Matt Raible

Bootiful Development with Spring Boot and Angular - Connect.Tech 2017Matt Raible

Bootiful Development with Spring Boot and React - SpringOne 2017Matt Raible

Bootiful Development with Spring Boot and React - Richmond JUG 2018Matt Raible

To simplify development and deployment, you want everything in the same artifact, so you put your React app “inside” your Spring Boot app, right? But what if you could create your React app as a standalone app and make cross-origin requests to your API? A client app that can point to any server makes it easy to test your current client code against other servers (e.g. test, staging, production). This session shows how to develop with Java 8, Spring Boot, React, and TypeScript. You’ll learn how to create REST endpoints with Spring MVC, configure Spring Boot to allow CORS, and create a React app to display its data. If time allows we’ll cover authentication with OpenID Connect and deployment to Cloud Foundry. Blog: https://developer.okta.com/blog/2017/12/06/bootiful-development-with-spring-boot-and-react YouTube: https://youtu.be/P6rwKHnXUJI

Get Hip with Java Hipster - JavaOne 2017Matt Raible

Choosing a Java Web FrameworkWill Iverson

Java Web Application Security - UberConf 2011Matt Raible

Spring bootShatrughna Singh

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...Matt Raible

Micro FrontendsSpyros Ioakeimidis

Seven Simple Reasons to Use AppFuseMatt Raible

Front End Development for Back End Developers - vJUG24 2017Matt Raible

How to Win at UI Development in the World of Microservices - THAT Conference ...Matt Raible

Spring Bootkoppenolski

Choose Your Own Adventure with JHipster & Kubernetes - Utah JUG 2020Matt Raible

Microservices for the Masses with Spring Boot, JHipster, and OAuth - South We...Matt Raible

The Ultimate Getting Started with Angular Workshop - Devoxx UK 2017Matt Raible

Reactive Java Microservices with Spring Boot and JHipster - Denver JUG 2021Matt Raible

Security Patterns for Microservice Architectures - Oktane20Matt Raible

Grails Spring BootTO THE NEW | Technology

Bootiful Development with Spring Boot and React - RWX 2017Matt Raible

Bootiful Development with Spring Boot and Angular - Connect.Tech 2017Matt Raible

Bootiful Development with Spring Boot and React - SpringOne 2017Matt Raible

Bootiful Development with Spring Boot and React - Richmond JUG 2018Matt Raible

Get Hip with Java Hipster - JavaOne 2017Matt Raible

Choosing a Java Web FrameworkWill Iverson

Java Web Application Security - UberConf 2011Matt Raible

Spring bootShatrughna Singh

Developing PWAs and Mobile Apps with Ionic, Angular, and JHipster - Devoxx Mo...Matt Raible

Micro FrontendsSpyros Ioakeimidis

Seven Simple Reasons to Use AppFuseMatt Raible

Front End Development for Back End Developers - vJUG24 2017Matt Raible

How to Win at UI Development in the World of Microservices - THAT Conference ...Matt Raible

Spring Bootkoppenolski

Choose Your Own Adventure with JHipster & Kubernetes - Utah JUG 2020Matt Raible

Similar to Microservices for the Masses with Spring Boot, JHipster, and JWT - Devoxx UK 2017 (20)

Microservices for the Masses with Spring Boot, JHipster, and OAuth - Utah JUG...Matt Raible

Microservices for the Masses with Spring Boot, JHipster, and JWT - Rich Web 2016Matt Raible

Microservices are all the rage and being deployed by many Java Hipsters. If you’re working on a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. We’ll use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Heroku, Kubernetes, Docker, ELK, Spring Cloud, Stormpath; there will be plenty of interesting demos to see!

BsidesMCR_2016-what-can-infosec-learn-from-devopsJames '-- Mckinlay

The document discusses the history and evolution of DevOps practices over time, from concepts like daily builds in the 1990s to more recent approaches like infrastructure as code and serverless architectures. It provides an overview of key figures and texts that helped establish ideas like continuous integration, continuous delivery, and site reliability engineering. The document also shares the author's perspective on what commercial security tools have been developed for DevOps workflows and mentions some open source collaboration and automation tools.

Stateful mock servers to the rescue on REST ecosystemsNuno Caneco

This document discusses the use of stateful mock servers to test REST APIs in microservices architectures. It describes some challenges with testing complex microservices ecosystems, including long test times due to dependencies. Stateful mock servers are proposed as a solution by replacing real dependencies with fake implementations that can be controlled during tests. Examples of different faking techniques like client fakes, proxies, and fake servers are provided. The document emphasizes generating mock server code to reduce development time and easily support contract and integration tests.

Microservices for the Masses with Spring Boot and JHipster - Chicago JUG 2018Matt Raible

Serverless 101 in MontrealAaron Williams

“Serverless” can be defined as a couple simple things: 1 - It’s a programming model for structuring applications as functions and events (basically a manifestation of microservices). 2 - It’s a cloud business model, where use is billed by the function call instead of by the provisioned server, so apps only pay when they run and for how long they run, eliminating over-provisioning and typically reducing costs. In this talk, we’ll cover the what, why and how of serverless, and learn more about it through running code. Throughout the session, we’ll focus on how the serverless model is being leveraged in the real world - not just toy functions and demos. Legacy enterprise apps - which are typically monolithic, written by large teams of Java and .Net devs, and resembling a bit of a mud ball - are being shaved down to take advantage of serverless, and we’ll be sharing some early results from those efforts. We'll discuss examples of how Fortune 50 companies are building their serverless projects on the Kubernetes and Mesos clouds they have already deployed. Le terme “Serverless” a plusieurs significations: 1 - un modèle de programmation pour structurer les applications en tant que fonctions et événements (essentiellement une manifestation de microservices); et 2 - Il s'agit d'un modèle d'entreprise Cloud, où l'utilisation est facturée par l'appel de fonction plutôt que par le serveur provisionné, de sorte que les applications ne paient que lorsqu'elles fonctionnent et pour combien de temps elles courent, éliminant le sur-provisionnement et réduisant les coûts associés. Dans ce discours, nous allons couvrir le quoi, le pourquoi et comment de Serverless, et en savoir plus à ce sujet en exécutant le code. Nous nous concentrerons sur la façon dont le modèle Serverless est utilisé dans le monde réel - pas seulement les fonctions et démos. Les applications d'entreprise héritées - qui sont généralement monolithiques, écrites par de grandes équipes de développeurs Java et .Net et ressemblant à un peu une grande boule de boue - sont rasées pour profiter de Serverless, et nous partagerons des résultats préliminaires de ces efforts.

Micro Frontends for Java Microservices - Belfast JUG 2022Matt Raible

You've figured out how to split up your backend services into microservices and scale your teams to the moon, right? But what about the frontend? Are you still building monoliths for your UI? If so, you might want to check out micro frontends—basically extensions to the microservices pattern, where the concept is extended to the frontend. Find out how to package and deploy your microservices and their UIs in the same artifact, as well as make it possible to test and develop them independently. In this live session, Matt will show you how to build a microservices and micro frontends architecture using Angular, Spring Boot, and Spring Cloud. Related blog post: https://auth0.com/blog/micro-frontends-for-java-microservices GitHub repo: https://github.com/oktadev/auth0-micro-frontends-jhipster-example

Securing a Cloud MigrationCarlos Andrés García

Erik Costlow, Product Evangelist at Contrast Security, was Oracle's principal product manager for Java 8 and 9, focused on security and performance. His security expertise involves threat modeling, code analysis, and instrumentation of security sensors. He is working to broaden this approach to security with Contrast Security. Before becoming involved in technology, Erik was a circus performer who juggled fire on a three-wheel vertical unicycle.

Securing a Cloud MigrationVMware Tanzu

Why Cloud Management Makes SenseRightScale

RightScale Webinar: Cloud is the most nebulous and abused term in information technology today. It describes multiple, disparate service models and has been retroactively applied to countless legacy technologies in attempts to keep them current. In this webinar, we'll discuss the cloud technology landscape and where RightScale fits in to drive agility, cost, and time savings above cloud infrastructure. RightScale has been investing heavily for the past four years to make cloud infrastructure easy to leverage. This webinar will clarify elements that are straightforward, what continues to be difficult, and the impact on your schedule and budget.

Spring Boot - Microservice Metrics MonitoringDonghuKIM2

Spring boot microservice metrics monitoringOracle Korea

This document summarizes a presentation on monitoring microservices with Spring Boot. It discusses evolving architectures from monolithic to microservices and challenges in microservices. It then covers different monitoring techniques like metrics, tracing and logging. It provides an overview of tools like Prometheus, Grafana, Spring Boot Admin, Eureka and Consul for monitoring microservices. Finally, it outlines hands-on labs to set up monitoring of a sample application with different tool combinations.

Micro Frontends for Java Microservices - Dublin JUG 2022Matt Raible

The document discusses micro frontends for Java microservices. It provides an overview of microservices and frameworks like Spring and JHipster that can be used to develop microservices in Java. It then introduces the concept of micro frontends as an architecture for microservice applications and demonstrates how to build a sample application with micro frontends using JHipster. It also covers securing microservices with OAuth 2.1 and shows a live demo of creating and running microservice applications with JHipster.

Learn Spring Boot With Bisky - IntoductionMarshallChabaga

This document introduces Spring Boot for beginners. It provides an overview of what Spring framework is, why it is used, how it works with layered architecture, and how it started as an IoC container. It also lists some of Spring's core modules and what topics will be covered, such as creating Spring Boot projects and REST services, integrating data persistence, security, and deploying to AWS. The document encourages readers to get started by creating their first Spring Boot application in the next video.

Micro Frontends for Java Microservices - Cork JUG 2022Matt Raible

Microservices for the Masses with Spring Boot and JHipster - RWX 2018Matt Raible

Microservices are being deployed by many Java Hipsters. If you're working with a large team that needs different release cycles for product components, microservices can be a blessing. If you're working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. This presentation will show you how to use JHipster to create Angular + Spring Boot apps with a unified front-end. You will leave with the know-how to create your own excellent apps! Bonus: I'll show you how to use Ionic for JHipster to create native applications on mobile. It's pretty darn slick! Blog posts: * https://developer.okta.com/blog/2018/03/01/develop-microservices-jhipster-oauth * https://developer.okta.com/blog/2018/01/30/jhipster-ionic-with-oidc-authentication GitHub: https://github.com/oktadeveloper/okta-jhipster-microservices-oauth-example Download the JHipster Mini-Book v5.0 for free from InfoQ! https://www.infoq.com/minibooks/jhipster-mini-book-5 You can also watch my JHipster Microservices course on Pluralsight. https://www.pluralsight.com/courses/play-by-play-developing-microservices-mobile-apps-jhipster

Microsoft DevOps Solution - DevOps Chetan Gordhan

Dockercon 2015 - Faster Cheaper SaferAdrian Cockcroft

It's clear that Docker speeds up development and makes testing and deployment more efficient. As Docker moves into production new use cases and patterns are emerging that address availability and security concerns. With microservices, safety is part of the architecture that developers need to understand and build for. It's no longer good enough to wrap a firewall around an entire app when it goes to production, and have a cold standby in case it breaks.

Painless DevSecOps: Building Security Into Your DevOps PipelineTasktop

This document discusses building security into DevOps pipelines using Tasktop Integration Hub to connect security vulnerabilities and defects across tools. It introduces the speaker and describes how Tasktop enables bidirectional artifact flow and reporting across lifecycle tools while maintaining relationships. A demo then shows synchronization between a security scanning and test management tool.

Intro to spring cloud &microservices by Eugene HanikblumEugene Hanikblum

This document provides an introduction to microservices and Spring Cloud. It discusses the benefits of a microservices architecture such as improved scalability, failover, and team agility. It then covers the history and concepts behind microservices including Conway's Law. Finally, it demonstrates how to build a simple Spring Cloud topology consisting of a configuration server, discovery server, sample service, and API gateway for routing requests between services. Hystrix is also introduced as a way to add circuit breaking and failure tolerance between communicating microservices.

Microservices for the Masses with Spring Boot, JHipster, and OAuth - Utah JUG...Matt Raible

Microservices for the Masses with Spring Boot, JHipster, and JWT - Rich Web 2016Matt Raible

BsidesMCR_2016-what-can-infosec-learn-from-devopsJames '-- Mckinlay

Stateful mock servers to the rescue on REST ecosystemsNuno Caneco

Microservices for the Masses with Spring Boot and JHipster - Chicago JUG 2018Matt Raible

Serverless 101 in MontrealAaron Williams

Micro Frontends for Java Microservices - Belfast JUG 2022Matt Raible

Securing a Cloud MigrationCarlos Andrés García

Securing a Cloud MigrationVMware Tanzu

Why Cloud Management Makes SenseRightScale

Spring Boot - Microservice Metrics MonitoringDonghuKIM2

Spring boot microservice metrics monitoringOracle Korea

Micro Frontends for Java Microservices - Dublin JUG 2022Matt Raible

Learn Spring Boot With Bisky - IntoductionMarshallChabaga

Micro Frontends for Java Microservices - Cork JUG 2022Matt Raible

Microservices for the Masses with Spring Boot and JHipster - RWX 2018Matt Raible

Microsoft DevOps Solution - DevOps Chetan Gordhan

Dockercon 2015 - Faster Cheaper SaferAdrian Cockcroft

Painless DevSecOps: Building Security Into Your DevOps PipelineTasktop

Intro to spring cloud &microservices by Eugene HanikblumEugene Hanikblum

More from Matt Raible (20)

Keep Identities in Sync the SCIMple Way - ApacheCon NA 2022Matt Raible

What if keeping your user stores in sync across domains was as simple as running "java -jar"? With Apache SCIMPle, it is! Apache SCIMple is a SCIM 2.0-compliant server powered by Spring Boot 3. You can run it standalone or embedded in your existing app. It exposes user management REST endpoints and handles the hassle of user synchronization for you. If your identity provider supports SCIM, use the simple way! GitHub example: https://github.com/mraible/okta-scim-spring-boot-example Demo script: https://github.com/mraible/okta-scim-spring-boot-example/blob/main/demo.adoc

Comparing Native Java REST API Frameworks - Seattle JUG 2022Matt Raible

Use Spring Boot! No, use Micronaut!! Nooooo, Quarkus is the best!!! What about Helidon? There are a lot of developers praising the hottest, and fastest, Java REST frameworks: Micronaut, Quarkus, Spring Boot, and Helidon. In this session, you'll learn how to do the following with each framework: ✅ Build a REST API ✅ Secure your API with OAuth 2.0 ✅ Optimize for production with Docker and GraalVM I'll also share some performance numbers and pretty graphs to compare community metrics. Related blog post: https://developer.okta.com/blog/2021/06/18/native-java-framework-comparison Helidon companion post: https://developer.okta.com/blog/2022/01/06/native-java-helidon GitHub repo: https://github.com/oktadev/native-java-examples

Reactive Java Microservices with Spring Boot and JHipster - Spring I/O 2022Matt Raible

Microservice architectures are all the rage in JavaLand. They allow teams to develop services independently and deploy autonomously. Why microservices? IF you are developing a large/complex application AND you need to deliver it rapidly, frequently, and reliably over a long period of time THEN the Microservice Architecture is often a good choice. Reactive architectures are becoming increasingly popular for organizations that need to do more, with less hardware. Reactive programming allows you to build systems that are resilient to high load. In this session, I'll show you how to use JHipster to create a reactive microservices architecture with Spring Boot, Spring Cloud, Keycloak, and run it all in Docker. You will leave with the know-how to create your own resilient apps! Related blog post: https://developer.okta.com/blog/2021/01/20/reactive-java-microservices YouTube demo: https://youtu.be/clkEUHWT9-M GitHub repo: https://github.com/oktadev/java-microservices-examples/tree/main/reactive-jhipster

Comparing Native Java REST API Frameworks - Devoxx France 2022Matt Raible

Lock That Sh*t Down! Auth Security Patterns for Apps, APIs, and Infra - Devne...Matt Raible

In this session, you'll learn about recommended patterns for securing your backend APIs, the infrastructure they run on, and your SPAs and mobile apps. The world is no longer a place where you just need to secure your apps’ UI. You need to pay attention to your dependency pipeline and open-source frameworks, too. Once you have the app built, with secure-by-design code, what about the cloud it runs on? Are the servers secure? What about the accounts you use to access them? If you lock all that sh*t down, how do you codify your solution so you can transport it cloud-to-cloud, or back to on-premises? This session will explore these concepts and many more!

Native Java with Spring Boot and JHipster - Garden State JUG 2021Matt Raible

Do you want to deploy your Spring Boot apps in a serverless environment and have them start up in milliseconds? Of course, you do! In this talk, Josh Long and Matt Raible will introduce you to Spring Native. They'll teach you all about how it can compile Spring Boot apps into native binaries that start faster than a speeding bullet! You'll learn about native testing support with JUnit 5 and the pros and cons of native vs JVM deployments. This talk will also highlight a customer, the JHipster project. JHipster generates Spring Boot-based monoliths and microservices. You'll learn about the project's experience with Spring Boot, Spring Cloud, Spring WebFlux, and Spring Native. It ain't easy being a Java Hipster, but the Spring ecosystem does simplify the process quite a bit. Recording on YouTube: https://youtu.be/k6nBB8FOmQ8 Examples on GitHub: https://github.com/mraible/spring-native-examples Writeup on LinkedIn: https://www.linkedin.com/pulse/jhipster-works-spring-native-part-2-matt-raible/

Java REST API Framework Comparison - PWX 2021Matt Raible

Use Spring Boot! No, use Micronaut!! Nooooo, Quarkus is the best!!! There's a lot of developers praising the hottest, and fastest, Java REST frameworks: Micronaut, Quarkus, and Spring Boot. In this session, you'll learn how to do the following with each framework: ✅ Build a REST API ✅ Secure your API with OAuth 2.0 ✅ Optimize for production with Docker and GraalVM I'll also share some performance numbers and pretty graphs to compare community metrics. Related blog post: https://developer.okta.com/blog/2021/06/18/native-java-framework-comparison

Web App Security for Java Developers - PWX 2021Matt Raible

Web app security is not just authentication and authorization. It's also the things you do to protect your web app from attackers with their XSS (cross-site scripting), SQL injection, DoS/DDoS attacks, and CSRF (cross-site request forgery), to name a few. Web app security is a central component of any web-based business. The internet exposes web apps to attacks from different locations and various levels of scale and complexity. Web application security deals specifically with the security surrounding websites, web applications, and web services such as APIs. In this presentation, you'll learn seven ways to better web app security, using Spring Security for code samples. You'll also see some quick demos of Spring Boot, Angular, and JHipster with Keycloak, Auth0, and Okta.

Mobile App Development with Ionic, React Native, and JHipster - Connect.Tech ...Matt Raible

Mobile development offers a lot of options. To develop native apps, you can use Java or Kotlin on Android. On iOS, you can use Objective C or Swift. There are other options, too. You can build hybrid mobile apps and Progressive Web Apps (PWAs). Hybrid mobile apps are those created with web technologies (HTML, JavaScript, and CSS) that look like native apps. PWAs have the ability to work offline and act like mobile apps. In this talk, we'll explore a few different mobile technologies: PWAs, React Native, and Ionic (with Angular). You'll walk away with knowledge of how to build mobile + Spring Boot apps in minutes with JHipster. * GitHub repo: https://github.com/mraible/mobile-jhipster * Demo script: https://github.com/mraible/mobile-jhipster/blob/main/demo.adoc

Lock That Shit Down! Auth Security Patterns for Apps, APIs, and Infra - Joker...Matt Raible

Web App Security for Java Developers - UberConf 2021Matt Raible

Java REST API Framework Comparison - UberConf 2021Matt Raible

Native Java with Spring Boot and JHipster - SF JUG 2021Matt Raible

Do you want to deploy your Spring Boot apps in a serverless environment and have them start up in milliseconds? Of course, you do! In this talk, Josh Long and Matt Raible will introduce you to Spring Native. They'll teach you all about how it can compile Spring Boot apps into native binaries that start faster than a speeding bullet! You'll learn about native testing support with JUnit 5 and the pros and cons of native vs JVM deployments. This talk will also highlight a customer, the JHipster project. JHipster generates Spring Boot-based monoliths and microservices. You'll learn about the project's experience with Spring Boot, Spring Cloud, Spring WebFlux, and Spring Native. It ain't easy being a Java Hipster, but the Spring ecosystem does simplify the process quite a bit. Recording on YouTube: https://youtu.be/F9oydL_MndA Examples on GitHub: https://github.com/mraible/spring-native-examples Writeup on LinkedIn: https://www.linkedin.com/pulse/jhipster-works-spring-native-matt-raible/

Lock That Shit Down! Auth Security Patterns for Apps, APIs, and Infra - Sprin...Matt Raible

In this session, you'll learn about recommended patterns for securing your backend APIs, the infrastructure they run on, and your SPAs and mobile apps. The world is no longer a place where you just need to secure your apps’ UI. You need to pay attention to your dependency pipeline and open source frameworks, too. Once you have the app built, with secure-by-design code, what about the cloud it runs on? Are the servers secure? What about the accounts you use to access them? If you lock all that sh*t down, how do you codify your solution so you can transport it cloud-to-cloud, or back to on-premises? This session will explore these concepts and many more!

Get Hip with JHipster - Colorado Springs Open Source User Group 2021Matt Raible

JHipster is bad-ass. It's an Apache-licensed open source project that allows you to generate Spring Boot APIs and Angular (or React/Vue) apps. It has a vibrant community and ecosystem with support for deploying to many cloud providers and using the latest DevOps buzzwords, like Docker and K8s. This session will show you JHipster, why it's cool, and show you how to create an app with it. JHipster 7 Demo: https://www.youtube.com/watch?v=6lf64CctDAQ JHipster 7 Tutorial: https://github.com/mraible/jhipster7-demo#readme

JHipster and Okta - JHipster Virtual Meetup December 2020Matt Raible

YouTube video: https://www.youtube.com/watch?v=ym-OPn4e_nQ When I first started working at Okta, I refactored JHipster's OAuth support to move from authentication on the client to the server, leveraging Spring Security. This allowed for easier client integration since we didn't need to worry about finding an OIDC client for each frontend framework. Fast forward four years and JHipster's OAuth 2.0 and OIDC support is first-class! It uses Keycloak in a Docker container by default, but it's easy to switch to another identity provider (IdP) thanks to Spring Boot. Other blueprints like Micronaut, Quarkus, Node.js, and .NET support OAuth and OIDC too! This presentation explains what OAuth 2.0 and OIDC is, gives an overview of JHipster’s OAuth implementation, and provides three quick demos with Keycloak, the Okta CLI, and Heroku. See https://developer.okta.com/blog/tags/jhipster for Okta + JHipster tutorials and screencasts! 邏 You also might enjoy my What the Heck is OAuth? blog post: https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth

Security Patterns for Microservice Architectures - SpringOne 2020Matt Raible

Are you securing your microservice architectures by hiding them behind a firewall? That works, but there are better ways to do it. This presentation recommends 11 patterns to secure microservice architectures. 1. Be Secure by Design 2. Scan Dependencies 3. Use HTTPS Everywhere 4. Use Access and Identity Tokens 5. Encrypt and Protect Secrets 6. Verify Security with Delivery Pipelines 7. Slow Down Attackers 8. Use Docker Rootless Mode 9. Use Time-Based Security 10. Scan Docker and Kubernetes Configuration for Vulnerabilities 11. Know Your Cloud and Cluster Security Blog post: https://developer.okta.com/blog/2020/03/23/microservice-security-patterns

Security Patterns for Microservice Architectures - ADTMag Microservices & API...Matt Raible

Security Patterns for Microservice Architectures - London Java Community 2020Matt Raible

Mobile Development with Ionic, React Native, and JHipster - AllTheTalks 2020Matt Raible

Mobile development offers a lot of options. To develop native apps, you can use Java or Kotlin on Android. On iOS, you can use Objective C or Swift. There are other options, too. You can build hybrid mobile apps and Progressive Web Apps (PWAs). Hybrid mobile apps are those created with web technologies (HTML, JavaScript, and CSS) that look like native apps. PWAs have the ability to work offline and act like mobile apps. In this talk, we'll explore a few different mobile technologies: Ionic 4 (with Angular), React Native, and PWAs. You'll walk away with knowledge of how to build mobile + Spring Boot apps in minutes with JHipster. * GitHub repo: https://github.com/mraible/mobile-jhipster * Demo script: https://github.com/mraible/mobile-jhipster/blob/master/demo.adoc