Securing Java Microservices with JWTs

"Microservices are awesome, but they're not free" - Les Hazlewood, CTO Stormpath

In this presentation, Micah Silverman will take you on a token based journey. The talk covers what tokens are, looking at cryptographically signed tokens - JWTs (JSON Web Token), using the JJWT library to create JWTs, mitigating CSRF (Cross Site Request Forgery) attacks using JWTs and establishing trust between microservices using JWTs. There are some slides and lots of code.

Speaker: Martin Snyder (http://martinsnyder.net/)

As Chief Technology Officer for Wingspan Technology, Inc. (http://www.wingspan.com/), Martin is responsible for technology and software engineering leadership. He brings over 20 years of experience as an executive and architect for enterprise applications, integration, and document management for global enterprise applications. Wingspan creates document management applications for regulated industries.

Prior to joining Wingspan, Martin founded and operated Ethermoon Entertainment (http://www.ethermoon.com/), a video game development company and was the CTO of Apricus, a clinical data company. He has held leadership positions in Philadelphia, Boston, and Silicon Valley. Martin has also published and presented on a variety of topics over the years, most recently on the Scala programming language, React.js and Functional Programming.

Venue: Evolve IP (http://www.evolveip.net/)

Evolve IP is The Cloud Services Company™. Designed from the beginning to provide organizations with a unified option for cloud services, Evolve IP enables decision-makers to migrate all or select IT technologies to its award-winning cloud platform. Evolve IP’s combination of security, stability, scalability, and lower total cost of ownership is fundamentally superior to outdated legacy systems and other cloud offerings. Today, over 100,000 customers across the globe depend daily on Evolve IP for cloud services like virtual servers, virtual desktops, disaster recovery, unified communications, contact centers, and more.

Food Sponsor: Stormpath (https://stormpath.com/)

Since 2011, Stormpath has provided the leading user management and authentication service for development teams. Our API offers reliable user infrastructure that won’t take weeks to deploy.

From custom user data, to complex authorization schemes, multi-tenant SaaS support and Single-Sign On, Stormpath is flexible and robust. Unlike traditional IAM, identity brokers, or open source frameworks, Stormpath offers a complete user backend for any application.