Thoughts on enterprise architecture, computers and information systems
Understanding the differences between software architecture, architectural design, styles, patterns, design approaches, and principles is crucial for making thoughtful decisions. Unfortunately, these terms are often mixed up or used as if they mean the same thing. This article explains what each term means, where it fits in the design hierarchy,
By clearly defining boundaries between various system components, the main aim is to separate the application's essential business logic from its external concerns.
This post looks at the history of containerization and shows the technology landscape that makes it possible.
Presenting a public key certificate issued by an intermediate certificate authority, using Kestrel, only presents the leaf certificate and does not include the intermediate certificate.
Elastic Agent fails to connect to Elasticsearch with unexpected EOF error message.
There are several versioning strategies that can be used to version ASP.NET Core APIs. In this post we will have a look at the various versioning strategies, how to implement them, and configure Swagger.
In this post we'll look at what observability is and how it can be done with the Elasticsearch Platform and Serilog for ASP.NET Core applications.
The Elasticsearch keystore is a vital component in the Elasticsearch security architecture. But, how do we create the keystore file before starting Elasticsearch in a containerized environment?
Minimising downtime when deploying a new version of your application is not an easy feat. In this post we will explore the blue-green deployment strategy.
Initially, the Berkeley Packet Filter (BPF) was created to filter out or discard unwanted network packets in the kernel space instead of user space for performance reasons. eBPF (enhanced Berkeley Packet Filter) on the other hand, extends the original BPF functionality to run sandboxed programs in a privileged context. In
OAuth 2.0 defines two types of client applications, viz., a confidential client and a public client.
The OAuth 2.0 Authorization Framework defines two token types viz., an Access Token and a Refresh Token.
The OAuth 2.0 Authorization Framework specifies four grant types: authorization code, implicit, resource owner password, and client credentials. This post describes the four flows at a high level.
In this post I will show you to configure Swagger-UI so that you can authenticate and authorize access to the secured endpoints in your API.
The OAuth 2.0 Authorisation Framework or, OAuth 2.0, is defined in RFC6749 . It is an authorisation specification. By authorisation we specifically mean to grant someone access to something you own such as your banking transactions. Let's assume that I have created the best alternative banking mobile