- react
- angular
- spring-boot
- devops
- authentication
- docker
- security
- git
- saas
- automation
- react-posts
- angular-posts
- devops-posts
- engineering
- architecture
- AI
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
-
Layer 5 — Spring Security: Role-Based Authorization and CORS
A deep dive into Spring Security's authorization layer — covering @PreAuthorize, tenant-scoped roles, CORS configuration mistakes, and the integration tests that validate the full security chain.
-
Layer 4 — API Key Authentication: Securing Machine-to-Machine Requests
A deep dive into API key authentication in a Spring Boot multi-tenant API — covering when to use keys vs JWTs, hashing at rest, the session passthrough bug, and a complete test matrix.
-
Layer 2 — Tenant Resolution: How a Single API Instance Serves Multiple Customers Safely
A deep dive into multi-tenant data isolation using Host-header-based tenant resolution, thread-local context, and Hibernate filters — including the failure modes that cause data leakage.
-
Layer 1 — nginx as Your Security Perimeter: SSL Termination and Access Logging
A deep dive into using nginx as the outermost security layer in a multi-tenant SaaS — covering TLS configuration, Let's Encrypt automation, access log design, and rate limiting.
-
Setting Up Transactional & Marketing Email with AWS SES
A developer's guide to configuring AWS SES for transactional email, DNS authentication, multi-tenant templates, and marketing nurture sequences.