Stay up to date with practical insights on backend engineering, system design, and building reliable software.
Getting Spring Cloud Vault working in development is straightforward. Running it reliably in production requires understanding lease renewal behavior, startup failure modes, high availability configuration, and the categories of secrets that Vault handles well versus those where it adds complexity without benefit.
Read moreAudit fields — who created this record and when, who last modified it — are required in most production applications. Spring Data JPA provides this automatically with minimal configuration, but the integration with bulk operations, tests, and security context has specific traps worth knowing.
Read moreSpring Data's derived query methods eliminate boilerplate for simple queries. They become unreadable for complex ones and break entirely for dynamic filtering. Here is where each approach belongs and how to recognize when you've outgrown derived queries.
Read moreMulti-tenancy requires tenant isolation at every layer: the tenant must be resolved from the request, propagated through the call stack, and enforced in database queries and cache keys. Missing any layer is a data leakage vulnerability.
Read moreSpring Security is comprehensive and opaque until you understand its filter chain model. Here is how authentication and authorization actually work, how to configure each layer, and what runs on every request before your controller sees it.
Read more