Notes on application security, API security, identity, and API management from the field. Articles are also published on Medium. Browse the archive by topic instead — 124 subjects.
An XML Gateway is an externally-facing DMZ tier of a web services platform. Generally, this DMZ tier will be facing the Internet, but it may simply be between business units or facing a leased line connecting one entity to another. It can be implemented using a software solution (such as web…
Read article: What is an XML Gateway?I suppose I’m switching gears a bit here back towards something almost philosophical rather than my usual concrete technical info So be it. In the last six months, I’ve been at several clients sites that are using SOA appliances to build XML Gateway and ESB patterns. I answer quite a few client…
Read article: What is an Appliance? What is a SOA Appliance?So, obviously, I haven’t posted anything here in a while🙂. Life has been busy. Starting several months ago, I left my job of four years and began independent consulting. Among other things, this means that the variety of topics discussed on thinkmiddleware.com should be more varied. I’m also going…
Read article: JVM Heap & GC Tuning…This is the first post on thinkmiddleware.com where we discuss DataPower. Guess what I’ve been doing with my career lately🙂.
Read article: IBM Announced the New XG45 DataPower applianceOn JBoss 4.x, a MySQL datasource looks something like:
Read article: JBoss 4.x and DataSource ConfigurationOn April 13th, 2011, Ryan Triplett and I spoke at IBM Impact in Las Vegas. The topic was “Secure Identity Propagation using WS-Trust, WS-Security, and SAML2“. The PowerPoint presentation can be found here. The original abstract:
Read article: Secure Identity Propagation using WS-Trust, WS-Security, and SAML2 — IBM Impact, 2011 SessionI gave the following presentation at IBM Impact in April, 2011.
Read article: Secure Identity Propagation using WS-Trust, WS-Security, and SAML2This article continues the discussion started in the Servlet Authentication article. Here we discuss Form-Based authentication; another common form of authentication when Servlet technology is used.
Read article: HTTP Client – Form-Based AuthenticationThere are three required authentication mechanisms supported by a compliant Servlet Container: HTTP Basic Authentication, Form-based Authentication, and CLIENT_CERT authentication. There is a fourth authentication method, DIGEST, that isn’t used very often in my experience. This final…
Read article: Servlet Container AuthenticationIf you were ever looking for a summary of each version of the J2EE Spec, it can take a few minutes to find it. So, here is a summary. The J2EE Specification is actually collection of numerous different Java-based technology specifications.
Read article: Summary of J2EE SpecsLooking for something specific? Browse all 124 topics.
