Microservices are all the rage and being deployed by many Java Hipsters. If you’re working on a large team that needs different release cycles for product components, microservices can be a blessing. If you’re working at your VW Restoration Shop and running its online store with your own software, having five services to manage and deploy can be a real pain. Share your knowledge and experience about microservices in this informative and code-heavy talk. We’ll use JHipster (a Yeoman generator) to create Angular + Spring Boot apps on separate instances with a unified front-end. I’ll also show you options for securing your API gateway and individual applications using JWT. Heroku, Kubernetes, Docker, ELK, Spring Cloud, Stormpath; there will be plenty of interesting demos to see!

1. Microservices for the Masses
Spring Boot · JWT · JHipster
Brought to you by Matt Raible and Stormpath

6. Conway’s Law
Any organization that designs a system (defined
broadly) will produce a design whose structure is a copy
of the organization’s communication structure.
Melvyn Conway 1967

7. "Do one thing and do it well."

8. The Future?

9. You shouldn’t start with a microservices architecture.
Instead begin with a monolith, keep it modular, and split
it into microservices once the monolith becomes a
problem.
Martin Fowler March 2014

13. start.spring.io

17. Microservices are awesome, but they’re not free.
Les Hazlewood Stormpath CTO

18. Spring Boot Demo

21. JHipster by the numbers
+250 contributors
+5400 Github stars
+320,000 installations
+100 companies officially using it

22. How to use JHipster
To install JHipster, you run an npm command:
$ npm install -g generator-jhipster
$ mkdir myapp && cd myapp
$ yo jhipster

23. What’s Generated?
Spring Boot application
AngularJS application
Liquibase changelog files
Configuration files

24. Security Screens
Several generated screens
Login, logout, forgot password
Account management
User management
Useful for most applications
Pages must be tweaked
User roles will be added/extended
Provides good examples of working screens
Forms, directives, validation…

25. Admin Screens
Monitoring
Health
Spring Boot configuration
Spring Security audits
Log management
Very useful in production

26. Liquibase

32. ThoughtWorks Radar

37. Securing your API
Choose the Right API Security Protocol
Basic API Authentication w/ TLS (formlerly known as SSL)
OAuth1.0a, OAuth2
API Keys vs. Username/Password Authentication
Store Your API Security Key securely
Use globally unique IDs (e.g. Url62)
Avoid sessions, especially in URLs

38. How to Secure your API
https://www.youtube.com/watch?v=hdSrT4yjS1g
Learn more on the Stormpath blog

40. Anatomy of a JWT

41. Create a JWT in Java
String jwt = Jwts.builder()
.setSubject("users/TzMUocMF4p")
.setExpiration(new Date(1300819380))
.claim("name", "Robert Token Man")
.claim("scope", "self groups/admins")
.signWith(
SignatureAlgorithm.HS256,
"secret".getBytes("UTF-8")
)
.compact();

42. Validating a JWT
String jwt = // get JWT from Authorization header
Jws<Claims> claims = Jwts.parser()
.setSigningKey("secret".getBytes("UTF-8"))
.parseClaimsJws(jwt)
String scope = claims.getBody().get("scope")
assertEquals(scope, "self groups/admins");

43. Better Secret
String b64EncodedSecret =
"Yn2kjibddFAWtnPJ2AFlL8WXmohJMCvigQggaEypa5E=";
.signWith(SignatureAlgorithm.HS256,
TextCodec.BASE64.decode(b64EncodedSecret))

44. JWTs in Java for CSRF and Microservices
https://www.youtube.com/watch?v=QSYK4OCmycI
Learn more on the Stormpath blog

45. Microservices with JHipster

48. Microservices are not free, but you get a deep discount
on microservices with JHipster.
Matt Raible 2016

49. JHipster.next
Angular 2
JUnit 5
Spring 5 and Reactive
Apache Kafka
HTTP/2
Progressive Web App Support

51. Do one thing and do it well.
Unix philosophy

52. This Presentation and Demos
https://github.com/mraible/microservices-for-the-masses

54. Image Credits
Fountain of colours - Paulius Malinovskis on Flickr
Ponte dell’Accademia at Sunrise - Trey Ratcliff on Stuck in Customs
Conway’s Law - Martin Fowler and James Lewis on Microservices
Good Morning Denver - Sheila Sund on Flickr
Monoliths - Arches National Park on Flickr
Mexico - Trish McGinity on McGinity Photo
Future - vivianhir on Flickr
Spring Runoff - Ian Sane on Flickr
The memory Seeker, Santa Monica Pier, CA - Pacheco on Flickr
San Francisco By Night - Trish McGinity on McGinity Photo