Suppose you have a Sprint controller which accepts a multipart Excel file, which you need to parse and process. One way doing this is adding a Multipart argument to your controller method, using a library like apache poi to parse the excel file and extract data from it, and finally to do something with the data. Wouldn’t it be nice if the Excel data were passed into your controller method as a DTO, instead of a multipart file, this way you wouldn’t have to worry about parsing the excel file yourself.

Spring security allows you to annotate methods with @PreAuthorize and @PostAuthorize annotations. Out of the box, this allows you to authorize calls using the authorities of the authenticated user.

When you use Spring-security’s @PreAuthorize and @PostAuthorize annotations as-is, out of the box, you might end up with a lot of security logic in these annotations. E.g.

A previous post mentioned that we could separate application code from security code by using the hasPermission security expression.

Recently I’ve been investigated the ways I can use spring-security to clean up the authorization code in one of our applications. Currently the access control code is spread out all over the code base. And it’s a mess.

I want to be able to search the posts on my Jekyll blog.

We have an application, which uses Shibboleth for authentication. We want to use spring-security for authorizaion within the application. The default spring-security assumes it it responsible for handling the authentication too.

I want to write a spring-boot application with a REST frontend and a JPA backend in Kotlin.

The following blog post describes a way to use immutable objects for persistence in java:

http://vlkan.com/blog/post/2015/03/21/immutable-persistence/

“AssertJ is a library providing easy to use rich typed assertions” is what the github page for the project says

https://github.com/joel-costigliola/assertj-core

I want to be able to add a TOC to Jekyll posts.

I want to be able to add a list of all posts to my Jekyll blog.