Learn how the Spring Boot team mastered their complex build processes, tackled flaky tests, and significantly improved their build times to enhance developer productivity.

This post describes three different options to get your local Java app running securely with TLS in no time, whether you need it publicly available or not.

A common OAuth 2.0 question we get: “How do I deal with OAuth in a load-balanced application?” The short answer: There’s nothing specific about session clustering for OAuth. The longer answer is—you likely still need to worry about cluster session management. This post will discuss how an OAuth login relates to your application’s session. And we’ll build a simple, secure, load-balanced application to demonstrate.

This video is a recording of a live Twitch stream wherein Brian Demers and Matt Raible (from Okta) …

The topic of validating an OAuth 2.0 access tokens comes up frequently on this blog. Often we talk about how to validate JSON Web Token (JWT) based access tokens; however, this is NOT part of the OAuth 2.0 specification. JWTs are so commonly used that Spring Security supported them before adding support for remotely validating tokens (which is part of the OAuth 2.0 specification.)

In this post, you will build a simple application that takes advantage of both types of validation.