- Published on
Secure Spring Boot resource servers without confusing OAuth authorization with OIDC login: validate issuer and audience, map scopes deliberately, choose user or workload identities, and test the failure paths.
Openid-connect
All Posts
- spring-boot (40)
- postgresql (18)
- microservices (16)
- apache-kafka (16)
- backend-architecture (15)
- java-25 (10)
- kafka (9)
- redis (6)
- jpa (6)
- transactional-outbox (5)
- java (5)
- idempotency (4)
- observability (4)
- virtual-threads (4)
- event-driven-architecture (4)
- event-driven (3)
- cqrs (3)
- spring-boot-40 (3)
- concurrency (3)
- performance (3)
- nextjs (2)
- security (2)
- migration (2)
- caching (2)
- distributed-systems (2)
- opentelemetry (2)
- resilience4j (2)
- rate-limiting (2)
- api-security (2)
- kafka-streams (2)
- debezium (2)
- docker (2)
- oauth-20 (2)
- real-time-analytics (2)
- kubernetes (2)
- performance-tuning (2)
- async (2)
- app-router (1)
- server-actions (1)
- ssrf (1)
- dependency-management (1)
- data-structures (1)
- operations (1)
- distributed-tracing (1)
- eventsourcing (1)
- distributed-transactions (1)
- saga-pattern (1)
- resilience (1)
- caffeine (1)
- materialized-views (1)
- event-sourcing (1)
- optimistic-locking (1)
- batch-processing (1)
- structured-concurrency (1)
- schema-evolution (1)
- avro (1)
- event-driven-systems (1)
- cdc (1)
- data-projections (1)
- read-models (1)
- graalvm (1)
- native-image (1)
- aot (1)
- performance-testing (1)
- spring-security (1)
- openid-connect (1)
- jwt (1)
- authorization (1)
- spring-kafka (1)
- retries (1)
- dead-letter-topic (1)
- database-sharding (1)
- data-routing (1)
- resharding (1)
- spring-webflux (1)
- project-reactor (1)
- r2dbc (1)
- backpressure (1)
- reactive-transactions (1)
- grpc (1)
- protocol-buffers (1)
- java-virtual-threads (1)
- deadlines (1)
- streaming (1)
- redis-streams (1)
- spring-session (1)
- eventual-consistency (1)
- data-reconciliation (1)
- read-your-writes (1)
- domain-driven-design (1)
- bounded-context (1)
- aggregates (1)
- service-mesh (1)
- istio (1)
- ambient-mesh (1)
- mtls (1)
- traffic-management (1)
- microservice-testing (1)
- testcontainers (1)
- contract-testing (1)
- multi-tenancy (1)
- hibernate (1)
- row-level-security (1)
- saas-architecture (1)
- distributed-caching (1)
- cache-invalidation (1)
- external-integration (1)
- prometheus (1)
- grafana (1)
- structured-logging (1)
- schema-migration (1)
- flyway (1)
- distributed-locking (1)
- redisson (1)
- concurrency-control (1)
- fencing-token (1)
- stateful-processing (1)
- multi-region (1)
- disaster-recovery (1)
- high-availability (1)
- spring-cloud-gateway (1)
- api-gateway (1)
- workflow-orchestration (1)
- state-machine (1)
- backend-for-frontend (1)
- api-design (1)
- cloud-cost-optimization (1)
- resource-management (1)
- consumer-driven-contracts (1)
- pact (1)
- testing (1)
- integration-testing (1)
- java-concurrency (1)
- thread-pool (1)
- spring-event (1)
- transaction (1)
- typescript (1)
- nodejs (1)
- mdx (1)
- build-tools (1)