The article explains JWT fundamentals, the drawbacks of pure stateless tokens, why adding a Redis blacklist or whitelist can solve revocation issues, compares the approaches, and provides a structured way to discuss these choices in a technical interview.
The article explains JWT fundamentals, why pure stateless tokens cannot be revoked, compares blacklist and whitelist Redis strategies, discusses token renewal with double‑token design, and shows how to articulate the right answer in an interview.
This tutorial walks you through creating a scalable, stateless authentication and authorization solution for Spring Boot 3.x applications using JWT, covering project setup, token generation, method‑level security, automatic token renewal, blacklist handling, and common troubleshooting tips.
This article explains how to build a JWT blacklist in Spring Boot 3, covering token fingerprinting, storage options using Caffeine or Redis, request interception, configuration, and sample login/logout endpoints to revoke tokens before they expire.
This article walks through the design and implementation of a lightweight API firewall embedded in a Spring Boot application, covering background pain points, architecture, core capabilities such as black‑white list, rate limiting, online configuration, detailed Java code, front‑end console, deployment, and practical use cases.
Learn how to control access in Nginx by configuring IP-based allow/deny rules, using external whitelist files, leveraging the ngx_http_geo_module for IP and country restrictions, and setting up GeoIP modules with sample configurations and commands for both Linux distributions.
This article walks through the design and implementation of a lightweight API firewall embedded in a Spring Boot application, covering background pain points, core capabilities such as blacklist/whitelist, QPS and user‑limit controls, online configuration via a modern web console, technical choices, detailed code examples, deployment tips, and practical use cases for small‑to‑medium services.
This article presents a hands‑on guide to using OpenResty—Lua‑enhanced Nginx—for implementing static and dynamic blacklists, fine‑grained rate limiting, A/B testing via upstream selection, and real‑time service quality monitoring, all with production‑ready code examples.
This tutorial explains how to use Nginx’s allow and deny directives, include external whitelist files, configure the ngx_http_geo_module for IP‑based access control, and set up country‑level restrictions with the geoip module, providing concrete configuration examples and command‑line steps for both black‑ and white‑listing.
This guide walks through enabling IP access control in INFINI Gateway, showing how to configure whitelist and blacklist rules, combine both, and verify the settings with example configurations and screenshots to secure Elasticsearch services.
This article examines how bitmap data structures and multithreading can dramatically accelerate blacklist filtering in large‑scale marketing systems, reducing processing time from tens of minutes to milliseconds while saving memory and improving overall system performance.
This article outlines essential API security mechanisms—including encryption, signing, timestamps, AppId authentication, rate limiting, blacklisting, and data validation—and provides practical Java implementation examples and code snippets.
This article demonstrates how DBLE manages table-level DML permissions, global blacklist rules, and user‑IP whitelist controls, showing configuration steps, reload procedures, and the resulting effects on query execution and login access.
This article demonstrates how OpenResty can be used in production to implement static and dynamic blacklists, request rate limiting, AB testing, and service quality monitoring by embedding Lua scripts into Nginx, with detailed configuration examples and code snippets.
This guide walks through configuring vsftpd on Linux, covering how to set up black and white lists, differentiate internal and external network access, and create virtual users with proper permissions and SELinux contexts, all illustrated with step‑by‑step screenshots.
