Tagged articles

Replay Protection

2 articles · Page 1 of 1
Cloud Architecture
Cloud Architecture
Sep 9, 2026 · Backend Development

Production-Grade Spring Boot API Encryption: RSA + AES-GCM Protocol & Implementation

This article details a production-ready end-to-end encryption protocol for Spring Boot APIs using RSA-OAEP for key wrapping and AES-GCM for payload encryption, covering protocol specification, replay protection with Redis, key rotation strategies, filter-based decryption, testing failure paths, observability, and deployment validation.

AES-GCMAPI EncryptionKey Rotation
0 likes · 43 min read
Production-Grade Spring Boot API Encryption: RSA + AES-GCM Protocol & Implementation
Xiaolin Talks Programming
Xiaolin Talks Programming
Sep 9, 2026 · Backend Development

Spring Boot Sa-Token Integration: High-Availability Auth with Dynamic Permissions & Replay Protection

This article details integrating Sa-Token 1.37.0 with Spring Boot 2.7.x and Redis 6.x for authentication, covering dependency setup, configuration, login implementation, dynamic permission via StpInterface, API replay protection using nonce/timestamp/signature, cluster deployment, comparison with Spring Security+JWT, and production pitfalls.

AuthorizationCluster DeploymentDynamic Permissions
0 likes · 22 min read
Spring Boot Sa-Token Integration: High-Availability Auth with Dynamic Permissions & Replay Protection