This workshop is an adaptation of the IBM Workshop Get started with security for your Java Microservices application.
The IBM Workshop depends on preprovisioned Kubernetes clusters on the IBM Cloud based on IBM Cloud Kubernetes Service (IKS) which are not free to use, they incur costs.
Instead, this version of the workshop is based on Minikube running on your own workstation.
In this workshop you will learn how to get started with Application Security from two perspectives:
We will show you with an example application:
The exercises are based on an example application based on our Open Source Github project Cloud Native Starter, build with Quarkus and Microprofile
The following screenshot shows the web application, you have to logon to see the list of articles.
To see the results in the web application, users need to be authenticated and they need to have the role
After completion of this workshop, you should understand the following application security related topics:
Application security provided by the platform
Application security with Keycloak and Quarkus
The scope of this workshop is not to explain every aspect of application security.
These are the sections of this workshop, go through all of them in sequence:
The last section shows how to compile and run the application locally:
This workshop has been tested on the following platforms:
Here are some blogs that describe how this project has been implemented-
The presentation that goes with this workshop is available here.