Sure the new features coming out in Spring Framework 4.0 are super exciting, but what about those of us that are still explaining dependency injection to our junior developers? And while Spock, Geb, and spring-test-mvc are revolutionizing our ability to test applications, what about the senior developers that are still justifying the value of unit testing to their managers. Strong technical leadership can overcome the organizational inertia that often resists your team's adoption of Spring technologies. Improve your leadership skills by drawing from lessons that were learned during the process of migrating Liberty University's software development department from "cut-and-paste coding" in ColdFusion to enterprise grade application development on the Spring Framework. Learn to plan an effective technology adoption strategy that avoids "new technology overload" and balances the pace of technology improvement with the necessity to continue production. Relationships with managers, junior developers, and production system administrators will all be important. Gain a better xtunderstanding of nontechnical managers and explore strategies for providing the conte they need to make the right decisions. Examine ways to build mentoring plans for your junior developers that include but extend beyond training and certifications from SpringSource University so that you can spend less time teaching and more time coding.

About the speaker

Tony Erksine, Liberty University

Designed and developed Java web applications using Spring, Hibernate, and Oracle. Coached teams of developers during every stage of the SDLC. Supervised the vetting, hiring, and training of new software developers. Helped transition the organization to agile software development using Scrum. Pioneered the adoption of new technologies and methodologies at Liberty (i.e. Spring, TDD) Participated in various interdepartmental efforts for architecture, crisis resolution, etc. More About Tony

This is the fourth post in my five part blog series that introduces Spring Security Java configuration. In this post, we will discuss how Spring Security Java configuration can be extended by walking through Spring Security OAuth Java configuration support.

Proof of Concept

While the Spring Security Java configuration works well for very basic configuration, it is just a proof of concept. We have not ensured that all the functionality available in the XML namespace is present within its Java configuration support. It was important to ensure that Spring Security's Java configuration would work…

Dear Spring Community,

I'm happy to announce the 1.1.0.M3 release of Spring Social, Spring Social Facebook, and Spring Social Twitter. At the same time, I'm also pleased to include Spring Social LinkedIn 1.0.0.RC2 along with these releases.

Spring Social is an extension of the Spring Framework that enables you to connect your Java applications to Software-as-a-Service (SaaS) providers such as Facebook and Twitter.

In these four releases, you'll find several improvements and new features, including:

• New ReconnectFilter to automatically handle invalid/expired connections and attempt to reestablish a new connection.
• Support for OAuth 2's 'state' parameter to prevent CSRF attacks.
• Support for non-standard, provider-specific parameters during provider sign-in.
• Several API updates in the API bindings for Facebook, Twitter, and LinkedIn.
• Initial support for Twitter's streaming API.
• Support for application-only Twitter authorization.

In addition, several bugs were fixed. See the changelog (Core|Facebook|Twitter|LinkedIn) for details.

To get the software, download the release distribution (Core|Facebook|Twitter|LinkedIn) or change the dependencies in your build file to reference version 1.1.0.M3 (or 1.0.0.RC2 for Spring Social LinkedIn).

These releases represent a step toward a Spring Social 1.1.0 release later this year. We have planned one more milestone release of Spring Social, Spring Social Facebook, and Spring Social Twitter that will include a few more small improvements and features.

We invite you to discuss this release as well as the continuing work toward Spring Social 1.1.0 in the Spring Social Forum and to report any bugs or improvements in the Spring Social issue tracker.

Update

Users should refer to the Spring Security Reference which contains more up to date information.

Original Blog Post

This is the third installment of a four part blog series. In my first post, I introduced Spring Security Java configuration and discussed some of the logistics of the project. In my previous post, we walked through a few examples of configuring web based security.

In this post, I will discuss how to configure method based security using Spring Security Java configuration. Like our previous post, we will start off with a very basic example and follow it up with an example…

Welcome to another installment of This Week in Spring! As usual, we've got a lot to cover so let's get to it!

1. Spring and Cloud Foundry ninja Jennifer Hickey has announced the availability of Spring Data Redis 1.1 M1 and 1.0.5. Check it out!
2. Spring Security lead (and ninja) Rob Winch has announced the initial availability of the Spring Security Java configuration support. Rob also just posted a very nice post (the first of four) on the new Spring Security Java configuration support. The first post addresses where you can find the new Spring Security Java configuration support.
3. Join us on July 18th for the webinar, "Functional Programming without Lambas" which introduces ways to use functional programing in Java right now (instead of waiting for Java 8!) using Guava, LambaJ, and Functional Java.
4. Corby Page has written a very nice post on ways to extend your REST APIs ability with his project, Yoga. In particular, it supports something called a selector which can be used to extract sub-views of the REST response to be sent back to the client. This can also be used to support what Lez Hazelwood aptly describes as entity expansions.
5. The Crunchify blog has a nice post on how to upload multiple files with Spring MVC.
   
6. SpringSource has added a new Live Online Core Spring class to the schedule for September .
   
7. The Spring LDAP project has gone social and moved to GitHub!
8. Our pal XueFeng Ding (who you may remember helped put together the blog "Spring at China Scala") has just recently given a very nice presentation on building REST APIs with Spring. I think his deck's pretty cool, so check it out!
9. Sergey Shcherbakov recently gave a nice talk introducing a whole slew of cool things. I think his sample code is particularly worth a look. The code features Spring 4 WebSockets, XML-less Spring Batch, Reactor and AngularJS examples. Nice job, Sergey!
10. Johnathan Mark Smith has put together a nice blog on how to use Spring Data with MongoDB. Nice job!
11. Nicolas Frankel has put together a very nice post on some of the compelling features in Spring 3.2. Nice job, Nicolas!
12. Nick Williams submitted a pull-request to support using Java configuration with Spring WS's MessageDispatcherServlet so that it can be configured within a ServletContextListener or a ServletContainerInitializer. Nice job, Nick!
13. This is not specific to Spring, or Spring Batch, per-se, but the Technology AMIS blog has an interesting look at how to use the Batch JSR (which is based on Spring Batch, and designed in cooperation with the Spring Batch team) to build a download manager. (Don't worry, you don't have to use GlassFish to work with the Batch JSR!) Pretty cool! If you know Spring Batch, then a lot of this will look familiar and, as Spring Batch will also implement the JSR, should prove a very nice on-ramp for anyone who wants to use Spring Batch in the future.

Update

Users should refer to the Spring Security Reference which contains more up to date information.

Original Blog Post

In my previous post, I introduced Spring Security Java configuration and discussed some of the logistics of the project. In this post, we will start off by walking through a very simple web security configuration. We will then spice things up a bit with configuration that has been customized some.

Hello Web Security

In this section we go through the most basic configuration for web based security. It can be broken into four steps:

• Updating your dependencies - we demonstrated this using Maven in our previous blog post
• Provide the Spring Security configuration - in our example this is done with a WebSecurityConfigurerAdapter
• Ensure the Spring Security configuration is loaded - in our example this is done with AbstractAnnotationConfigDispatcherServletInitializer
• Configure the springSecurityFilterChain - in our example this is done with AbstractSecurityWebApplicationInitializer
…

Dear Spring Community,

I am pleased to announce the first milestone release of Spring Data Redis 1.1!

Downloads | JavaDocs | Reference Documentation | Changelog

Highlights include:

• Support for several new Redis 2.6 commands and options
• Support for Redis 2.6 scripting
• Connection pool enhancements

There is also a new GA release, Spring Data Redis 1.0.5!

Downloads | JavaDocs | Reference Documentation | Changelog

Spring Data Redis 1.0.5 is a maintenance release containing a few bug fixes and minor enhancements. See the Changelog for more information.

For more information about Spring Data Redis please see the home page for a live sample and webinar recording.

We look forward to your feedback on the forum or in the issue tracker…

Yesterday I announced the release of Spring Security Java Configuration support and the release of Spring Security 3.2.0.M2 which contains Java Configuration support.

Spring Security's Java Configuration support is intended to provide a complete replacement of the XML namespace configuration. It is also designed to be extensible, so that Spring Security's extension projects can work nicely with the Java Configuration support.

In this first post of a five part Spring Security Java Configuration blog series, I discuss the logistics of the Spring Security Java Configuration project.

[callout title="Required Versions"]Regardless of how you decide to integrate with Spring Security, it is important to ensure you are using Spring 3.2.3.RELEASE+ to ensure that you avoid SPR-10546.[/callout]

Availability

Before we get started, I'd like to talk about the two modules that Spring Security's Java Configuration can be found.

Availability in Spring Security 3.2.0.M2+

Spring Security Java Configuration has been copied into the Spring Security 3.2.0.M2+ code base. This means if you are using Spring Security 3.2.0.M2+ you should ensure to have the spring-security-config jar on your classpath. For example, you might have the following…