Security Archive

Automated API Penetration Testing using OWASP Zap and Open API in a Spring Boot Application

In some of your services you might want to allow your users to use multiple ways to authenticate. This guide is for you if you want to support multiple JWTs signed by different issuers (in...

You are part of an cloud migration team. Your colleague has a hard disk with some certificates for several stages of the old monoliths environment. What can you do now ?

Recently we faced the problem how to implement a client certificate validation or so called mutual authentication with a Node.js microservice on Azure App Service. Unfortunately, the corresponding Azure documentation doesn't provide a Node.js example...

Less "blah", more "aha!"

Automated API Security Testing with OWASP Zap and Open API

Kafka Security – Behind the Scenes

How to support different JWTs in your Spring Boot application

Identity federation – More than connecting to Facebook?

Storing certificates in Git ?

Secure Spring Boot Applications with TLS and HTTP/2

TLS Mutual Authentication on Azure App Service with Node.js

AWS Cloud - The way to your secure cloud datacenter

Check your logs with CloudWatch

Encrypted properties with Spring

Authorize your Android App with AppAuth and Identity Server 3

JSON Web Token with Apache Shiro

Bootiful Security: A secure web application in 5 minutes