About 1:00am yesterday morning, I sent in the text for Chapter 9, Securing Your App with Spring Boot to my publisher for Learning Spring Boot. I decided to take things to the next level in security by locking down a microservice-based solution.
I spent about three weeks working on the code. I wanted it just right. Another week was spent crafting the prose to go along with it. Instead of JUST writing a security policy, I introduced a refactoring. After all, when’s the last time YOU secured an app and didn’t have to refactor something due to unforeseen issues?
I also bring in Spring Session. When working with microservices, we need a way to smoothly share the user’s current session and this project does it with elegance.
Of course, there’s a big caveat: no two secured systems ever look identical. Spring Security can handle all your needs, but there is no way to document all permutations. So this introduces one keen solution, as general as I felt could be made. But with strong suggest that the reader delve into other books and the project’s own reference docs.
All in all, I hope my readers enjoy it. It’s the last chapter before we take the app we’ve been building to production (next chapter, Taking Your App to Production with Spring Boot).