technical.cx Sources

InfoQ Development

Server-Side DPoP and Token Exchange in Spring Security 7

Spring Authorization Server ships inside Spring Security 7. This server-side guide covers enabling DPoP and RFC 8693 Token Exchange, the silent .dPoP() opt-in change in 7.1, and combining both safely.

Topics: Security

InfoQ Development

How to Find Resilience Bugs in Systems that Don't Exist

Hillel Wayne explains how formal methods principles - like properties, verification, and environments - help software engineers uncover subtle concurrency bugs and architectural flaws early.