Blog: Security

Featured Post

Interview The software that could be putting your cyber-security at risk
Security

Middleware Cyber Security: The Hidden Risk Every C-Suite Should Prioritize

When tackling cyber risk at the strategic level, it pays to learn from trusted leaders. Steve Millidge, CEO and Founder of Payara, was recently featured in an authoritative Business Reporter interview discussing the overlooked cybersecurity […]

See Security Posts

3 minutes
Security

Securing Payara Server and Payara Micro with a Supported JDK

As you probably already know, Oracle decided to stop providing public updates for Oracle Java Development Kit 8 (JDK […]

7 minutes
Payara

New Feature in Payara Server 5.184: Allow Use of Different Security Providers via JCE API

Java SE comes with many security primitives upon which Java EE builds. JAAS for instance is a well known […]

5 minutes
Payara

Security Features of Payara Server You Don’t Know About – Authorization Modules

For a long time, the Java EE security system has had a quite cool, but woefully underused, feature; pluggable authorization […]

2 minutes
Security

Learn More about Secure JAX-RS

Introduction With the rise of the micro-service architecture, we have seen also a shift from SOAP to REST as […]

3 minutes
Security

カスタムSSL証明書を用いたPayara Serverのセキュア構成

Payara Serverの管理タスクで最も多いものの1つは、他のWebサーバーと同様に、HTTPプロトコルやPayara Serverへのリモート・アクセスをセキュアにするための電子証明書のセットアップです。自己署名証明書または信頼できる認証機関の署名入り証明書のいずれかをお持ちでしょうが、どちらの場合も証明書をPayara Serverのドメインに追加してセキュアな通信に用いるのはとても簡単です。  

5 minutes
Payara

OpenID Connect in the Payara Platform 5.183

Introduction OpenID Connect is a security mechanism for an application to contact an identity service, verify the identity of […]

7 minutes
Security

Securing a REST Service

If you’re building a REST service, then that REST service will expose some kind of data or will allow […]

6 minutes
Security

Java EE Security API (JSR 375/Soteria) with JWT tokens

Introduction :  Java EE Security API (JSR 375) : The Java EE Security API 1.0 is a new spec […]

9 minutes
Security

Securing a Payara Server Cluster using NGINX

In order to make a cluster of servers appear as one server, you need to introduce a load balancer. […]

11 minutes
Security

Security Auditing in Payara Server – Part 2

Following up from the first part of the Security Auditing  article, where we covered the audit logging,  in this […]

11 minutes
Security

Security Auditing in Payara Server – Part 1

Security is always a concern you must have when implementing applications that will run in production environments. Both the […]

3 minutes
Migration

GlassFish to Payara Server Migration – migrating away from the Oracle Access Manager integration

In the fifth part of our continuing series on alternatives for commercial Oracle GlassFish features, we are looking  at […]