Cracking the code review and Spring Boot goes to Zanzibar

This Amsterdam JUG meetup will be hosted and sponsored by CarePay, in their office in the AHTC Building, Tower D, Floor 4, Paasheuvelweg 25, 1105 BP, Amsterdam.

Agenda

17:30 Doors open
18:00 Food with thanks to CarePay for hosting and sponsoring us!
19:00 Talk 1: Cracking the code review: From guesswork to automated guidance by Paco van Beckhoven
19:45 Break
20:00 Talk 2: SpringBoot goes to Zanzibar by Barry Lagerweij
20:45-21:30 Drinks & networking

About the talks:

Cracking the code review: From guesswork to automated guidance

Code reviews are vital for ensuring good code quality and fostering teamwork. They serve as one of our last lines of defense against bugs and subpar code reaching production. Yet, they often turn into annoying tasks riddled with frustration, hostility, unclear feedback and lack of standard practices. How can we improve this crucial process?

From a decade’s worth of experience and consulting across varied companies, I’ve extracted essential lessons about code reviews. In this session we will cover:

• The Art of Effective Code Reviews: Learn “how not to come across as a passive-aggressive jerk”, the value of self-reviews, and effective communication strategies.
• Streamlining the Review Process: Embrace clear repository ownership and refined review guidelines for more efficient and constructive reviews.
• Elevating Reviews with Automated Tools: The most fun part! Explore tools that reinforce code consistency and quality, from automated style fixes to architecture checks. Let’s cut through the noise of bikeshedding and focus on the essence of the changes.

Speaker: Paco van Beckhoven is a passionate software engineer that likes to challenge the world and the software around him. He works as a software engineer at Hexagon where his main focus is to improve the development process. Five years ago, he started speaking at conferences to entertain, and more importantly, educate visitors on various topics with a focus on software quality.

Spring Security goes to Zanzibar

In recent years, more and more companies have adopted a new authorization framework based on the Google Zanzibar Paper: a highly insightful document that details Google's approach to scalable and efficient authorization.

While Spring Security provides support for performing Role Based Access Control (RBAC), if you're running a multi-tenant system it is left to the developers to implement proper Data Access Controls.

In this talk, we are going to explore the concepts of relation-based authorization models. We will show a hands-on example using Spring Security and SpiceDB, where we provide a way for you to implement a scalable, flexible, efficient and reliable authorization model for your Spring Boot applications.

Speaker: Barry Lagerweij is chief architect at Carepay, with many years of experience in enterprise software development. He is responsible for secure software engineering at Carepay, where financial, personal and healthcare data needs to be protected in a multi-tenant service. Barry is passionate about writing beautiful software using Java, Kotlin, Golang and Kubernetes.