A web service that anyone can call is a web service anyone can abuse. Before an API goes anywhere near production it needs to know who is calling it and what they are allowed to do. This module covers how to secure your Java services, then how to grow them into systems made of many smaller services.
You'll start with Spring Security and token-based login using JWT, then see how OAuth2 lets users sign in through another provider without sharing their password. From there you'll look at microservices: how splitting an application into small independent services works, and how messaging with Kafka lets those services talk to each other without being tied together.
With secured, connected services in place, you'll be ready for the final module, JVM, Performance & Deployment, which covers keeping them fast and running them in production.
Implementing JWT login and role-based access in a Spring Boot 3 application using Spring Security 6.
A clear explanation of how OAuth 2.0 and OpenID Connect work, and why they are used for sign-in and delegated access.
How a monolith differs from microservices, and the trade-offs of splitting an application into small independent services.
Connecting Spring Boot microservices with Apache Kafka using topics, producers, consumers, and @KafkaListener.