The Right Feature at the Right Place - Authorization Example

Explore a 25-minute conference talk that delves into the importance of placing infrastructure-related capabilities in the right location within a tech stack. Learn how to make your system more easily auditable by following a step-by-step approach, using authorization of a security policy as an example. Begin with a regular Spring Boot project with Spring Security, then progress through the introduction of Open Policy Agent (OPA) and Apache APISIX API Gateway. Discover how to move authorization details from buried code to a readable, accessible place, ultimately creating a more scalable and auditable system. Presented by Nicolas Fränkel, a Developer Advocate for Apache APISIX with extensive experience in consulting, training, and authoring books on Java, Spring, and DevOps technologies.