SSO java-servlet-application-with-keycloak

There are some concepts relating to SSO - single sign on in software applications. What is OpenID? OpenID allows you to use an existing account to sign in to multiple websites, without needing to create new passwords. You may choose to associate information with your OpenID that can be shared with t…

Read More

Spring Security Overview

Spring Security is a powerful and highly customizable authentication and access-control framework. It is the de-facto standard for securing Spring-based applications. Spring Security is a framework that focuses on providing both authentication and authorization to Java applications. Like all Spr…

Read More

SQL Injection

1> SQL injection (SQLi) refers to an injection attack wherein an attacker can execute malicious SQL statements (also commonly referred to as a malicious  payload ) that control a web application’s database server (also commonly referred to as a  Relational Database Management System – RDBMS ). ( http://www.acunetix.com/websitesecurity/sql-injection/) An SQL Injection can destroy your database. SQL inj…

Read More

Java Basic authentication over SSL

Self-signed' certificate Tomcat site comes with great instructions for setting up SSL. The documentation can be found at http://tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html . In a typical production environment, SSL is handled by a web server such as Apache, which unencrypts the requests and forwards them on to Tomcat. As a result, usually Tomcat doesn't need to be concerned with SSL…

Read More

Java security: Java security, Part 1: Crypto basics

1. About this tutorial What is this tutorial about? There is perhaps no software engineering topic of more timely importance than application security. Attacks are costly, whether the attack comes from inside or out, and some attacks can expose a software company to liability for damages. As computer (and especially Internet) technologies evolve, security attacks are becoming more sophisticated and…

Read More