SSShivendra Singh Chouhaninbuildlayer.hashnode.dev·23m ago · 7 min readHow I Implemented Rate Limiting in Spring Boot Without External LibrariesI came across a post a post on LinkedIn about a rate limiting question asked in an interview. So I thought, I will build it to improve my understanding. You can find the code here. Rate limiting restr00
APAbhisek Pandainabhisekpanda.hashnode.dev·10h ago · 18 min readPhase 3: Rate Limiting — Protecting Backend Services from Traffic SpikesA Deep Dive into Token-Bucket Rate Limiting with Redis and Spring Cloud Gateway Introduction In Phase 2, we built a security pipeline — JWT authentication, API key authentication, RBAC, and request v00
Kkameninpureengine.hashnode.dev·22h ago · 6 min readAnatomy of the Data Access Contract: Protect Your Domain from Framework Leaks (Chapter 3)In almost every modern Java textbook, data persistence is introduced with a dangerous shortcut. You are told to create an interface, extend JpaRepository<Product, UUID>, and call it a day. The result?00
ABAshish Babuinthestacktrace.hashnode.dev·3d ago · 6 min readI Let My LLM Guess a Number My Own Code Already KnewWhen I built the matching engine for ProximaHire — a semantic job-matching tool that compares resumes to job listings using vector embeddings — the core idea was simple: compute a cosine similarity sc23A
Kkameninpureengine.hashnode.dev·4d ago · 5 min readWhy Package Structures Won't Save Your Spring Boot Architecture (And How Maven Enforces It) (Chapter 1)How We Turned Architectural Guidelines Into Compilation Errors Have you ever found yourself doing a Friday afternoon Code Review, only to discover that someone injected the EntityManager directly into00
Kkameninpureengine.hashnode.dev·4d ago · 8 min readAnatomy of the Domain Module: Throw Away Anemic Models and Ban `@ManyToMany` (Chapter 2)Years ago, when I was starting my career, I religiously followed the standard textbooks. The ones that teach you that entities should be anemic (just data holders) and that the "service layer" should 00
MMMostafa Mahmoudinbuildwithmostafa.hashnode.dev·Jul 20 · 31 min readHTTP That Never Ends: SSE in Productionبِسْمِ اللَّهِ الرَّحْمَٰنِ الرَّحِيمِ In the name of Allah, the Most Gracious, the Most Merciful. Take a standard HTTP request-response, never finish writing the response, and you get an endless s00
MNMilan Nikicinsecuritydepth.hashnode.dev·Jul 20 · 22 min readFile Upload Vulnerabilities in Java and Spring: Secure Coding PatternsBuild web apps long enough and file uploads become unavoidable. Profile pictures. PDF invoices. CSV imports. Resume uploads. Log bundles for support. Every time an application lets users send bytes an00
AGAishwary Guptainaishwarygupta.hashnode.dev·Jul 19 · 7 min readSolution for a Slow Spring Boot ApplicationWhen Logs Stopped Being Enough As developers, we've all been there. An application works perfectly during development, passes testing, and even deploys successfully to production. Then users start rep00
APAbhisek Pandainabhisekpanda.hashnode.dev·Jul 20 · 37 min readPhase 2: Securing the Gateway — JWT, API Keys, RBAC, and Request ValidationA Deep Dive into Building a Production-Grade Security Layer for a Spring Cloud Gateway Introduction In Phase 1, we built the skeleton of Aegis Gateway — a reactive API gateway built on Spring Cloud G00
