Source code samples for "Defence in Depth" articles and presentations.
This is an accompanying implementation of a secure REST API in Java 17 with Maven and Spring Security that follows the series of articles found at:
https://omegapoint.se/defence-in-depth
An article that covers these concepts exactly can be found at:
https://omegapoint.se/secure-apis-in-aspnet
The approach follows that of the book "Secure by Design":
https://www.manning.com/books/secure-by-design
The repo also contains a docker-compose setup of KeyCloak, a token service for demo and education purposes: