There are some basic principles that should be followed when implementing security in enterprise applications. The following list aims to give the basic ideas, and is not intended to be exhaustive.
- Preface
- Introduction
- Designing and Structuring Java Enterprise Applications
- The purpose of enterprise applications
- Outer enterprise project structure
- Enterprise project code structure
- Summary
- Implementing Modern Java Enterprise Applications
- Use case boundaries
- Core domain components of modern Java EE
- Patterns in Java EE
- External and cross-cutting concerns in enterprise applications
- Flow of execution
- Concepts and design principles of modern Java EE
- Preserving maintainable code with high quality
- Summary
- Lightweight Java EE
- Container and Cloud Environments with Java EE
- Motivations and goals
- Containers
- Java EE in the container
- Container orchestration frameworks
- Realizing container orchestration
- Java EE in orchestrated containers
- 12-factor applications and Java EE
- Have one codebase tracked in revision control, many deploys
- Explicitly declare and isolate dependencies
- Store config in the environment
- Treat backing services as attached resources
- Strictly separate build and run stages
- Execute the app as one or more stateless processes
- Export services via port binding
- Scale out via the process model
- Maximize robustness with fast startup and graceful shutdown
- Keep development, staging, and production as similar as possible
- Treat logs as event streams
- Run admin/management tasks as one-off processes
- Cloud, Cloud native, and their benefits
- Summary
- Application Development Workflows
- Motivation and goals of productive development workflows
- Realizing development workflows
- Workflows with Java EE
- Continuous Delivery culture and team habits
- Summary
- Testing
- The necessity of tests
- Requirements of well-crafted tests
- What to test
- Definition of test scopes
- Implementing tests
- Running tests locally
- Maintaining test data and scenarios
- Summary
- Microservices and System Architecture
- Motivations behind distributed systems
- Challenges of distribution
- How to design systems landscapes
- How to design system interfaces
- Event sourcing, event-driven architectures, and CQRS
- Communication
- Microservice architectures
- Implementing microservices with Java EE
- Summary
- Monitoring, Performance, and Logging
- Security
- Conclusion
- Appendix: Links and further resources
Security principles
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.