60thAirhacksQ&A.md

60thAirhacksQ&A.md

Ask questions and see you at March, 13th, 6.PM. CET: http://www.ustream.tv/channel/adambien

Also checkout recent episode:

Please keep the questions Java EE-stic. Means: as short and as concise as only possible. Feel free to ask several, shorter questions.

Hi Adam,

how would you secure your vanilla js/html webapp with JEE backend considering the following requirements:

• Form Authentication for login
• Authorization per page (depending on the roles of the user elements/pages are restricted)

Thanks a lot.
Your web standard talks are awesome.

Hi Adam

Is it possible to implement a ChatWithClients Microservice with websockets in java ee? If so how can you implement such thing?
Difference between @Gauge and @counted

Thank you

Hello Adam,

Sure you are doing great.

1. Please, what is the most effective way of checking database connection leaks in Java SE/ Java EE using a connection pool or plain JDBC? For JDBC I have used Apache DBCP and considering reviews which say DBCP has issues under heavy load, I am looking at hikari and Cp30. Please from experience what is the way to go.

2. In what order should the following be closed. Connection, PreparedStatement, ResultSet?

3. What are the most effective ways/ APIS, Libraries to test for connection/ connection pool leakages in java code?

4. Does a high number of sleeping connections have a negative impact on Database/system performance?

Thank you very much.

Hey Adam,

I have a question regarding websockets with Java EE within OpenShift/Kubernetes. If your service is deployed several times and each client (e.g. a SPA) gets connected to a different pod how do you make sure you notify all websocket clients when e.g. a message arrives via JMS or Kafka only to one instance (e.g. one consumer group for the whole application)?

Thanks,
Phil

Hi Adam,

What is your opinion about Wildfly & Galleon?

• Startup time & Heap size: Can the same goals be achieved with removing unused sub systems from the standalone.xml?
• Image build time: Because of a smaller Wildfly building Docker images is likely a bit faster
• Disk space: This should not be an issue in 2019
• What is the use case for Thorntail anymore (if there ever was one)?

Hi Adam,

my question is about Java EE Security (Java EE 8) best practices (for which somehow there are surprisingly little resources, did anyone use JASPIC/JAAS etc. before?).

How to handle authentication and authorization (the Java EE way) in a module A which is used by other modules running on the same application server? One of the responsibilities of this module A is authentication/authorization which can be used by other modules.

Which interfaces to implement? How does this work with EJBs, should any of the implementing classes be EJBs?

Most examples I found are just about web app authentication and not about a module which doesnt care where the caller has the credentials from.

I already listened to your podcast about this.

Hi Adam,
I have a database cluster with three nodes and we want to distrubute the load such that we write on one note and read on the three nodes. Can I do that by making two connection pools one for write only and the other for read only, or there is another solution.
Thanks

Hi Adam,

I have two non related questions:

• what is the future of Jersey ?
• Based on the Web components tutorials you provide, you recommend using web components and writing the front end from the ground up without any framework, isn't that too time consuming? How about using Web components frameworks like Polymer or SkateJs ?
  Thanks

Hi, Adam.
Nice to see you :)
What are your thoughts on quarkus (https://quarkus.io/)?
Thanks.

Bastian

Hello Adam, nice questions for you :-)

*) I'm curious what's your opinion about the just released Quarkus project.
*) About your 2019 predictions, do you think the balance between SpringBoot and Java EE will change? Will Jakarta+Microprofile projects succeed in changing the current situation of Spring dominance?
*) I see a lot of interest on Java SE low latency/real time expecially in financial environment. Apart from GC optimisation, what kind of technical solution (or approach) can help to address this kind of requirement? There is some standard project/library on purpose?
*) Let's talk about project documentation. There is a sort of standard in the Jira+Confluence utilization. A lot of open source projects use them. There is also some interest in using git+asciidoc tools (documentation as code). What are your suggestions about this topic,
what the tools/methodology you utilize in your commercial projects for both issue tracking docs and wiki docs?

Thank you and greetings from Florence!

Hello Adam,
We don't have the possibility to use Docker for our systems at the moment. We are using Puppet to configure, install and deploy. We are packaging our war and application server (Wildfly) in an RPM. Is there a more effienct way to install wildfly and deploy the application that you can recommend?
Thanks.
Kind regards, Luis

@qnoid: Blaze-Persistence Entity Views might be of interest to you for your JSON serialization use case. You can create your JSON-DTOs as java classes i.e. entity views and provide the mapping back to the entity model based on JPQL. Behind the scenes, it will fetch only the data that you actually need.
Spring Data Projections is a similar but more limited technology of the Spring ecosystem.