Spring ApplicationContext Hierarchy and a High CVE in Axelix
How Spring's ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.

Mikhail Polivakha is the founder and CEO of Axelix Labs and a software engineer focused on Java and Spring Boot. He contributes to open-source projects, including Spring Data and Spring Boot, and speaks at Spring I/O and Devoxx.
94 views
Mikhail PolivakhaHow Spring's ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.

Mikhail Polivakha
787 viewsHow to ship default configuration from a shared Spring Boot starter so services can still override it.

Mikhail Polivakha
803 viewsSee how Axelix uses Java ScopedValue to propagate security context and sealed interfaces to protect domain invariants in real-world …