Spring ApplicationContext Hierarchy and a High CVE in Axelix
How Spring's ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.
154 articles in this category · 1,262,300 views.
RSS feed
Mikhail Polivakha
91 viewsHow Spring's ApplicationContext hierarchy caused a JWT bypass in Axelix when Actuator ran on a separate management port.

Nicolas Duminil
339 viewsThe same small AI service in Spring AI, LangChain4j on Spring Boot and on Quarkus, held to one shared test. Where they differ, and where …

Spring's @RequestPart cannot stream multipart uploads — not even FilePart. The API that actually does, and the tests that prove it.

Mikhail Polivakha
881 viewsHow to ship default configuration from a shared Spring Boot starter so services can still override it.

My job portal asks Gemini why a job fits a candidate. Every claim must quote its source, and a few lines of plain Java drop any quote that …

Add OpenID Connect login to Spring Boot with pac4j: Maven setup, provider configuration, user profiles and logout.

Tim Kelly
151 viewsProvision a MongoDB Atlas Ephemeral Cluster with one API call, then have an AI coding agent build a full-stack Spring Boot and React job …

Monitor Spring Boot applications on a small VPS using Actuator and StatLite, without operating a full Prometheus and Grafana stack.

I stored two embeddings for every job in my Spring Boot job portal and measured which one finds the right jobs. One of them barely mattered, …

Sweety717
857 viewsWhat I learned building an AI code-review workflow around GitHub Pull Requests, Spring Boot, and multiple AI providers.