Actuator /env: what changes when show-values is enabled
Correction: Spring Boot 3+ hides values by default. Start with the exact version and effective show-values configuration.
Sep 11 2026 · 2′ · Tutorials · spring-boot · java
Tag: spring-boot
18Actuator Endpoints in Spring Boot: Allowlist, Don't Just Disable the Obvious Ones
Spring Boot Actuator exposes more by default than most teams realize. The difference between an endpoint that's useful for monitoring and a map of environment variables handed to an attacker comes down to a decision almost nobody makes explicitly: allowlist versus disabling what looks obvious.
Aug 23 2026 · 8′ · Tutorials · spring-boot · java
What It Means to Be a Java Champion in 2026: The Real Criteria Behind the Recognition and Why I Care
Java Champion isn't an academic title or a corporate badge. It's recognition of community contribution — and in 2026, quality technical content in Spanish is an undervalued and completely legitimate contribution. My declared goal and the real criteria behind the program.
Aug 18 2026 · 10′ · Tutorials · open source · spring-boot
Stateless JWT vs stateful sessions: the framework I use to choose in identity systems
Stateless JWT isn't the universal answer tutorials promise. If your system needs immediate revocation or fine-grained auditing, state isn't the enemy — it's the solution. Here's the decision framework I use in real identity systems.
Aug 18 2026 · 9′ · Tutorials · seguridad · JWT
CAdES vs XAdES Digital Signatures in Java: The Differences That Matter When Your CA Asks for One and You've Built the Other
CAdES and XAdES aren't interchangeable even though both are "advanced signatures." The choice depends on document type, trust profile, and what the CA actually expects to validate. A technical guide with DSS and Java to make the right call before you sign anything.
Aug 12 2026 · 9′ · Tutorials · seguridad · certificados
Virtual Threads Won't Save You From a Badly Placed synchronized
Virtual Threads solves the cost of spinning up thousands of threads in the JVM. It doesn't solve the blocking problem when your code has synchronized blocks or blocking native calls. JEP 444 says so, but almost nobody reads it to the end.
Aug 11 2026 · 8′ · Tutorials · concurrencia · spring-boot
Spring Boot Actuator: What to Expose, What to Hide, and What to Check Before Adding Endpoints
Actuator isn't the problem. Enabling it without a clear exposure policy is. A practical guide to using it as an operational tool without turning it into unnecessary public attack surface.
Jun 17 2026 · 8′ · Tutorials · devops · backend
Digital identity backend architecture: the decisions tutorials skip
Auth tutorials show you the happy path. The real problems in digital identity show up in revocation, state-change propagation, and the trust model. A decision guide from the inside.
May 30 2026 · 9′ · Tutorials · backend · seguridad
The benchmark that made me change my mind about Jakarta EE in 2026
Same backend, same database, same k6. In the first runs it looked like Embedded GlassFish was on top. When I fixed JDK, warmup, window, heap, and DB attribution, the story changed: Spring Boot ended up with the best local profile for this workload. Payara Micro was the cleanest Jakarta EE by check failures. GlassFish surprised by being viable.
May 28 2026 · 10′ · Experiments · Performance · backend