A common and effective method of validating webhook requests incorporates the use of HMAC (Hash-based Message Authentication Code) SHA256, a timestamp and signature headers. These elements combined ensure that only verified requests are processed.
Webhooks offer a robust integration with third-party services, facilitating complex and time-consuming processes asynchronously. Yet, they present a high risk of missed events due to high latency or performance issues. In this blog post, I’ll guide you through a reliable and scalable solution for handling webhooks. The toolkit consists of Spring Boot, WebFlux, Kotlin coroutines, and Apache Kafka. I’ll show you how to build a system that efficiently enqueues incoming requests into an internal queue for background processing. So let’s delve into it!
In the previous episode we learned how to load user details from a database. Now it’s on time to replace the default login form that comes with Spring Security with our own. Project Setup If you are new to this series on Spring Security and WebFlux, check my initial blog Read more…
In the last episode we established a simple form-based authentication with hardcoded credentials. Today, we take it step further and load user details from a database. Project Setup If you are new to this series on Spring Security and WebFlux, check my initial blog post to see how to start Read more…
This post looks at a standard form-based authentication and how it applies to Spring WebFlux. Follow along a complete working example and tweak the source code to your own liking. Project Setup The stack: Spring Boot Spring Security Kotlin + Gradle Java 11 Spring Boot allows you to easily build Read more…
Announcing a new series on securing reactive web applications. Started as an experiment and turned into a concise project showcasing some of the distinct features of the Spring Security framework. Join me on my weekly coding sessions on Sunday, tweak my code to your own needs, learn and have fun! Read more…