What can Spring do to help me secure my application? — Audience This article is aimed at developers with a solid understanding of the basics of Spring and web security. It marries up the two concepts, concluding with a worked example of using Spring Security with Spring Boot. Argument Spring Security is centred round two core concepts: Authentication: Verifying you are who you…

An introduction to caching principles — Audience This article is aimed at developers with a reasonable understanding of how the internet functions, contemporary application architectures and AWS. It will cover what caching is in a more general sense, the motivation behind using it, and then deep dive into specific implementations. Argument A cache stores previously used or computed…

An introduction to Kinesis using Apache Camel and Spring Cloud Stream — Audience This article is aimed at developers with a reasonable understanding of Java and Spring, but no experience whatsoever with AWS Kinesis, Apache Camel or Spring Cloud Stream. It will explain the role of message brokers, introduce Kinesis and conclude with a worked example based on Twitter data. Argument Message Brokers Message brokers act…

Creating an amazing space for audience participation! — At the BBC, we put audiences at the heart of everything we do, so it’s important they feel they have a safe space to interact with all of our online products. …

Proof? You can’t handle the proof! — Audience This article is aimed at developers with a very solid understanding of OAuth2.0. My article here should give you a good start. You will also need a good understanding of how JWT tokens work, which you can get from reading my article here. Within the piece we are going to…

OAuth2 (plus some) — Audience This article is aimed at engineers with a very solid understanding of OAuth2.0 looking to understand how it differs to OAuth2.1. If you’re not familiar with OAuth2.0, I’d recommend skimming my article here. It will also help to at least be aware of some of OAuth2.0’s core extensions. …

Flexible authorization for all! — Audience This article is aimed at those looking for an overview of the draft IETF GNAP core protocol. It’s going to be very broad brushstrokes, but hopefully enough to give you a flavour of what GNAP is, and specifically how it differs to OAuth2.0. The reason that the piece is written…

Jest, Cypress, and Storybooks — Audience This article is aimed at engineers with a solid understanding of React, Next.js, and Typescript. An excellent start would be my pieces linked in the previous sentence. The goal is to move from writing well-constructed front-end code to writing well-constructed front-end code we know works (an important distinction). To do…

Thank U, Next — Audience This article is aimed at developers with a solid understanding of web development, JavaScript, TypeScript and React. If you don’t feel comfortable with the last two I recommend reading my TypeScript article here, and React article here. Within the article we will conduct a whistle stop tour of Next.js, …