news.lavx.hu

Spring Boot Actuator Vulnerability in Axelix Exposes Endpoints Without JWT Authentication

A configuration oversight in the Axelix Spring Boot platform allowed unauthenticated access to Actuator endpoints when management ports were separated from main application ports. The flaw stemmed ...
GitHub

Smart Clinic Management System

A rubric-focused implementation of the IBM / Coursera Java Development Capstone Project. The project demonstrates a Spring Boot MVC application, REST APIs, JPA/Hibernate persistence, MySQL schema and ...
51CTO

SpringBoot 轻松整合 SpringSecurity+JWT 登录认证

⚠️ 别神话 JWT：它不是 Session 的替代品，而是"无状态凭证"。只要你需要即时踢人下线或强制改密后失效，就必须额外引入服务端状态（见第十二节黑名单方案）。 一句话概括：登录时签发 ...
The Hacker News

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), ...
learn

Secure Java Spring Boot apps using Microsoft Entra ID

This article demonstrates a Java Spring Boot web app that signs in users on your Microsoft Entra ID tenant using the Microsoft Entra ID Spring Boot Starter client library for Java. It uses the OpenID ...
51CTO

Spring Boot 中 JWT 登录授权+无感刷新，看这篇就够了！

JWT 双令牌无感刷新，是前后端分离项目兼顾安全与体验的标准鉴权方案，整套方案无需引入 Spring Security 等重型框架。 JWT 是前后端分离项目最主流的无状态鉴权方案，无需服务端存储 Session ...
blockchain-council

Building an AI-Powered Java Spring Boot Backend with Claude: Chat, Summarization, and RAG

Building an AI-powered Java Spring Boot backend with Claude is now a practical, production-oriented path for teams that want chat experiences, reliable summarization, and Retrieval-Augmented ...
note

Claude Code から自分だけのドキュメントを検索する — OAuth2 認証付き MCP Server × ユーザー分離 RAG を Spring Boot 4 で実装する

ユーザー分離された RAG ナレッジベースを構築し、OAuth2 認証付き MCP Server として Claude Code に開放するまでの設計と実装。Spring Boot 4.0.3 / Java 25 / pgvector / Ollama / Spring AI MCP 1. 問いの設定 ...
Hacker

Building Self-Healing Java Microservices: A Step-by-Step Guide

I am seasoned technology expert and developed applications in Java, Python and Data Science and AI technologies. In the early days of Java development, we relied on the "Cargo Ship" architecture: ...
cybersecuritynews

Apex – AI-Powered Pentester Attacks Apps in Black-Box Mode to Find Vulnerabilities

Apex is an autonomous, AI-powered penetration testing agent designed to operate in black-box mode against live applications. It does not require access to source code ...
GitHub

Spring Boot REST API

Java 17 or higher Maven 3.6 or higher PostgreSQL 12 or higher Redis 6 or higher IDE (IntelliJ IDEA, Eclipse, or VS Code) src/main/java/com/rskworld ...
learn

Secure Java Spring Boot apps using groups and group claims

This article demonstrates a Java Spring Boot web app that uses the Microsoft Entra ID Spring Boot Starter client library for Java for authentication, authorization, and token acquisition. The app uses ...