Cross Site Request Forgery and OAuth2
In this short article we look at Cross Site Request Forgery in the context of OAuth2, looking at possible attacks and how they can be countered when OAuth2 is being used to protect web resources. OAuth2 is a protocol enabling a Client application, often a web application, to act on behalf of a User, but Read more…
Peter Ledbrook
Countdown to Grails 2.0: Static resources
Web applications typically rely heavily on what we call static resources, such as Javascript, CSS and image files. In a Grails application, they are put into a project's web-app directory and then referenced from the HTML. For example, will create a link to the file web-app/css/main.css. All very straightforward. You might even think that the Read more…
Spring 3.1 M2: Spring MVC Enhancements
This post focuses on what's new for Spring MVC in Spring 3.1 M2. Here are the topics: Code-based equivalent for the MVC namespace. Customizable @MVC processing. Programming model improvements. A brief reminder that the features discussed here are in action at the Greenhouse project. Code-based Configuration For Spring MVC As Chris pointed out in his Read more…
What's New In Spring Roo 1.1.1
It's our pleasure to announce the general availability of Spring Roo 1.1.1. This new release incorporates over 250 fixes and enhancements, including many performance and functionality improvements. As always, SpringSource Tool Suite (STS) 2.5.2 will be released very shortly and incorporate this new version of Spring Roo. You can also download the standalone version of Read more…
Green Beans: Getting Started with Spring MVC
Spring MVC, a part of the core Spring Framework, is a mature and capable action-response style web framework, with a wide range of capabilities and options aimed at handling a variety of UI-focused and non-UI-focused web tier use cases. All this can potentially be overwhelming to the Spring MVC neophyte. I think it's useful for Read more…
Spring 3 on a Java EE 6 server
Spring on Java EE 6 – a viable combination? Can you easily continue to use Spring when you have a Java EE 6 server to deploy to? At this year's edition of the SpringOne conference which kicked off just a few hours ago, I'll once again be presenting a session on Spring and EE 6: Read more…
Gemini Web Release Candidate
The first release candidate of the Gemini Web project is available for download. See the bug list for what's changed since milestone 4. Thanks to Violeta Georgieva of SAP for her continued contributions. The project is due for an Eclipse review on 20 October so that it can graduate from incubation and ship a 1.1.0 Read more…
Peter Ledbrook
The future of functional web testing?
The Groovy community is a productive bunch, which means there are a plethora of frameworks, libraries, and tools to make your life easier. The area of testing seems to be particularly fertile ground and I've recently been looking into a couple of tools that, when combined, promise a step change in your productivity when writing Read more…
Spring Roo 1.1.0.M3 Released
Update: SpringSource Tool Suite 3.5.0.M3 is now available for download. It includes the latest Spring Roo 1.1.0.M3 and GWT 2.1.0.M3 support. Many members of the community have been eagerly awaiting Spring Roo 1.1.0.M3, and I'm pleased to announce it is now available (download here). This release incorporates more than 150 new features, enhancements and other Read more…
Spring Web Flow 2.2.0.M1 Released
I'm pleased to announce the first milestone of Spring Web Flow 2.2 is now available for download. The release is also available through the Maven milestone repository at http://maven.springframework.org/milestone. As with Spring Web Flow 2.1, this release requires JDK 1.5, Spring 3 and Spring Security 3. The main focus of the release is to address Read more…
