On behalf of the Spring Cloud team it is my pleasure to announce the 1.0.0.M1 release of the new Spring Cloud project called Spring Cloud Contract. You can grab it from the Spring’s milestone repository or even better - go to start.spring.io and pick it from there.

Spring Cloud Contract

The microservice approach has plenty of benefits but also introduces complexity. This is an inevitable result of working with distributed systems: with increasing complexity inevitably more questions are posed. In this article we show how to test microservices and create a better API by using the Consumer…

A new Spring Web Flow 2.4.4 maintenance release is now available for download or use from Maven and Gradle builds. This release extends compatibility to Hibernate 5.2 and also includes several mainly JSF related fixes.

In this article we continue the series on Reactive Programming, and the focus is less on learning the basic APIs and more on more concrete use cases and writing code that actually does something useful. We will see how Reactive is a useful abstraction for concurrent programming, but also that it has some very low level features that we should learn to treat with respect and caution. If we start to use these features to their full potential we can take control of layers in our application that previously were invisible, hidden by containers, platforms and frameworks.

Bridging from Blocking to…

Welcome to another installment of This Week in Spring! This week I am in Cincinnati and Columbus, Ohio, and Los Angeles and San Francisco, California talking to customers and doing meetups.

This is my favorite time of year! As we lead to SpringOne Platform, there's so much good stuff being released that one can hardly keep up! I am really looking forward to this year's SpringOne Platform show, coming in early August. It's an amazing time to build applications, and SpringOne Platform is in a unique position to capture the larger discussion: why do we #devops, #cloud, #agile, or #microservice…

Welcome to another installment of This Week in Spring! This week I'm in Dublin, Ireland and London, UK, and Boston, Massachusetts, giving open workshops at Pivotal Dublin and London and speaking to local customers. It's been a fun week and there's a lot to cover! So, let's get to it!

This is my favorite time of year! As we lead to SpringOne Platform, there's so much good stuff being released that one can hardly keep up! I am really looking forward to this year's SpringOne Platform show, coming in early August. It's an amazing time to build applications, and SpringOne Platform is in a unique…

Spring Framework 4.3.1 and Spring Security 4.1.1 provide fixes for CVE-2016-5007 "Spring Security / MVC Path Matching Inconsistency".

Applications using Spring Security and Spring MVC should upgrade to Spring Security 4.1.1+ and Spring Framework 4.3.1+ and use the MvcRequestMatcher.

Additional details and further mitigations can be found in CVE-2016-5007.

Welcome to another installment of This Week in Spring! This week I'm in rainy but beautiful Seoul, South Korea and Tokyo (come join me for a talk on Wednesday!), Osaka, and Hiroshima, Japan where I'll be doing a few meetups and talking to businesses of all shapes and sizes. If you're in either region, please hit me up!

This is my favorite time of year! As we lead to SpringOne Platform, there's so much good stuff being released that one can hardly keep up! I am really looking forward to this year's SpringOne Platform show, coming in early August. It's an amazing time to build applications, and…

Welcome to another installment of This Week in Spring! This week I'm in Munich and Wolfsburg, Germany, visiting with customers, then it's off to Seoul, South Korea, for customers and some user group talks.

This week we've got a lot of exciting Spring Cloud Data Flow news, coincident with the new Spring Cloud Data Flow RC1

• The good Dr. Pollack, co-lead of the Spring Cloud Data Flow project, just announced Spring Cloud Data Flow RC1 which has updated deployers supporting deployments locally and to Apache YARN, Kubernetes, Mesos, and of course Cloud Foundry, an incredible integration of Spring Cloud Flo (a visualization for Spring Cloud Data Flow streams) into the Spring Cloud Data Flow Dashboard, improved OAuth support and so much more!
• I really enjoyed Mark Paluch's excellent blog pulling back the veil of obscurity around the security secrets sensation sweeping the nation, Hashicorp Vault, and how Spring Cloud Vault works…

Passwords, API keys and confidential data fall into the category of secrets. Storing secrets the secure way is a challenge with limiting access and a true secure storage. Let's take a look at Hashicorp Vault and how you can use it to store and access secrets.

How do you store Secrets?

Passwords, API keys, secure Tokens, and confidential data fall into the category of secrets. That's data which shouldn't lie around. It mustn't be available in plaintext in easy to guess locations. In fact, it must not be stored in plaintext in any location.

Sensitive data can be encrypted by using the Spring Cloud Config Server or TomEE. Encrypted data is one step better than unencrypted. Encryption imposes on the other side the need for decryption on the user side which requires a decryption key to be distributed. Now, where do you put the key? Is the key protected by a passphrase? Where do you put the passphrase? On how many systems do you distribute…