#quarkus — Public Fediverse posts

Stateless MCP gives gateways useful protocol headers. It does not decide whether a caller may use a tool, or use it with those arguments.

I tested that boundary with Quarkus MCP Server 2.0 Beta3: OIDC for identity, OPA for tool listing and calls, and a guardrail for destination-level authorization.

https://www.the-main-thread.com/p/quarkus-mcp-layered-authorization

#Quarkus #MCP #OpenPolicyAgent #AppSec

We're on holiday so no Quarkus Insights today. Join us August 31st for a new session!

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

Feature flags help separate deployment from release. They also become hard to migrate when provider SDK calls spread through business code.

I used the new Quarkus Feature Flags OpenFeature adapter to move one pricing flag to flagd while keeping the existing `Flags` API. The tutorial covers tenant targeting, live rule changes, safe defaults, and in-memory test overrides.

http://www.the-main-thread.com/p/quarkus-feature-flags-openfeature

#Quarkus #Java #OpenFeature #FeatureFlags

We're still enjoying our midyear holiday schedule so we won't have session on Monday, August 17th.

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

I wanted to see what a secure build-time Java patch looks like after the annotation.

The example uses a fictional access-policy SDK. Quarkus Shim replaces one method during the build. The pipeline proves the old and new behavior, keeps the dependency in the SBOM, stores the bytecode dump, and rejects an expired patch.

https://www.the-main-thread.com/p/quarkus-shim-secure-java-pipeline

#Java #Quarkus #AppSec #DevSecOps

⏰ Starting soon! Join us for Quarkus Insights Ep. #256 with Hector Ventura for "What is Floci?"

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

Quarkus Qubit turns a supported set of Java lambdas into JPA Criteria query executors during the build.

I used it for captured filters, DTO projections, grouping with `HAVING`, and a scalar subquery against PostgreSQL. One preview limit matters: an unsupported expression logged a generation error, but Maven still reported `BUILD SUCCESS`.

Code, SQL, Dev UI, and tests:
https://www.the-main-thread.com/p/quarkus-qubit-jpa-criteria-lambda-queries

#Java #Quarkus #Hibernate #PostgreSQL

Join us next Monday, August 10th, at 9am EST for Quarkus Insights Ep. 256 as Hector Ventura joins us to discuss Floci. A fast, free, open-source AWS (and Azure) emulator built with Quarkus Native.

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

Java Digest #38: Valhalla в master, ежемесячные патчи Oracle и AI-скиллы в IDEA

Всем привет! 👋👋👋👋👋 Мы — Java-разработчики Т-Банка: Андрей , Арсений , Роман , Константин и Константин. Собираем интересные новости, статьи, туториалы и другие материалы из мира Java-разработки и делимся этим со всем сообществом. Июль получился плотным. Valhalla после 12 лет разработки залили в master-ветку JDK одним PR на 2900 коммитов, Oracle сломал двадцатилетнюю традицию квартальных патчей и перешел на ежемесячные, а про саму Java наконец сняли полнометражный документальный фильм. Собрали все в нашем дайджесте.

https://habr.com/ru/companies/tbank/articles/1067830/

#java #valhalla #quarkus #spring #intellijidea

A timed-out POST can still commit. Retrying it may create a second order, payment, or fulfillment request.

I built a Quarkus checkout demo around the HTTP Idempotency extension and tested the full state machine: first request, stored replay, concurrent 409, payload mismatch, and missing keys. The production section also covers the Redis 0.1.0 blocker and the crash window around external side effects.

https://www.the-main-thread.com/p/quarkus-http-idempotency

#Quarkus #Java #Idempotency

Сердце облачной Java: проверяем Quarkus

Java уже какое-то время витает в облаках. Всё больше приложений и сервисов переходят на облачную архитектуру. Мы решили не отставать и проверить один из главных проектов для разработки производительных облачных приложений на Java — Quarkus.

https://habr.com/ru/companies/pvs-studio/articles/1066358/

#Java #Quarkus #pvsstudio

⏰ Starting soon! Join us for Quarkus Insights Ep. #255: Faster, Leaner, Predictable: Quarkus in the real world with Alexandru-Cătălin Diniș.

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

Join us next Monday, August 3rd, at 9am EST for Quarkus Insights Ep255. Are your technical decisions impacting your bottom line? Alexandru-Cătălin Diniș joins us to examine Quarkus through a FinOps lens to see how startup time and memory footprint influence your cloud costs. Perfect for architects and engineering leaders looking to build predictable, cost-efficient microservices.

#java #quarkus #quarkusinsights

Our next #JCON2026 session is live: 'Java Beyond Frameworks: Avoiding Lock-In with Agnostic Design' with Rijo Sam

The Problem: Modern #Java applications often become prisoners of their #frameworks. While tools like #SpringBoot and #Quarkus …

Grab your coffee and hit play: https://youtu.be/4vVRqh_g4TU

I know Maven well. Gradle was mostly unfamiliar, so I built one Quarkus project to see where the difference becomes real.

A custom task generates build metadata, declares its inputs and output, joins `processResources`, and becomes `UP-TO-DATE` on the second run. The Java stays ordinary; the build model changes.

https://www.the-main-thread.com/p/quarkus-gradle-for-maven-developers

#Java #Quarkus #Gradle #Maven

JDK 25 gives Quarkus services another startup option: train an AOT cache, keep the JVM, and reuse class-loading, linking, and method-profile data on the next run.

I built the full path with PostgreSQL and Podman: packaged training test, strict cache verification, a 20-run benchmark, and a target-specific container image. Local median readiness dropped from 1022.4 ms to 380.3 ms.

https://www.the-main-thread.com/p/quarkus-project-leyden-aot-cache

#Java #Quarkus #ProjectLeyden #JVM

No Quarkus Insights today, but we'll be back next Monday, August 3rd, for a new session!

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

We're taking an additional holiday this coming Monday so no new Insights podcast but we'll be back August 3rd with a new session.

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

An upload bar reaching 100% proves that the bytes arrived. It says nothing about validation, importing, publication, or failure.

I rebuilt the pattern in Quarkus with two clocks: browser transfer progress, then a PostgreSQL-backed job processed by Scheduler and streamed over SSE. Reload-safe, cancellable, and honest about phases where no useful percentage exists.

https://www.the-main-thread.com/p/quarkus-long-running-job-progress-sse

#Java #Quarkus #PostgreSQL #SSE

Vault's TOTP API can validate a six-digit code. That is not yet a complete MFA flow.

This Quarkus tutorial adds the missing boundaries: authenticated subject, stored enrollment mapping, strict input validation, a two-minute step-up JWT, normal RBAC, and a replay test against a patched Vault runtime.

https://www.the-main-thread.com/p/quarkus-vault-totp-step-up-auth

#Java #Quarkus #Vault #TOTP #APISecurity

Sorry, we're on holiday so no Quarkus Insights today. Join us in two weeks for a new session!

http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

MCP tool authorization should not depend on the model following an instruction.

This builds a Quarkus MCP server where OPA evaluates skill manifests and caller context — trust tier, signature status, team, scopes — before a tool appears in tools/list or executes.

Rego compiles to Wasm and evaluates in-process. No sidecar, no network call. Each decision logs a policy version and reason codes.

https://www.the-main-thread.com/p/opa-quarkus-mcp-tools

#OPA #Quarkus #MCP #Java #Authorization

#AI can query your DB—but can it do it correctly? That’s the hard part. @MarcoBelladelli shows how #Hibernate + #Quarkus + #LangChain4j add validation & control back. Want fewer production surprises?

Dive in: https://javapro.io/2026/04/03/talk-to-your-data-natural-language-data-access-in-java/

#LLM #Java @Hibernate @QuarkusIO @langchain4j

Java в эпоху ИИ. К чему пришли на пятом MTC Web Services Meetup для разработчиков

Еще несколько лет назад разработчики на Java в основном обсуждали новые инструменты для создания программ, особенности архитектуры приложений и способы сделать сервисы быстрее и надежнее. Сегодня к этим темам добавился еще один важный вопрос — как искусственный интеллект меняет профессию программиста. Именно с этого началась пятая встреча в рамках MTC Web Services Meetup, которая собрала в Москве Java-разработчиков, архитекторов и инженеров. Вместо привычной серии докладов организаторы открыли вечер большой дискуссией о том, как меняется современная разработка, чему теперь стоит учиться, какую роль играют ИИ-ассистенты и как их использование влияет на безопасность решений. Обо всем этом — в материале. Читать дальше

https://habr.com/ru/companies/ru_mts/articles/1059050/

#разработка #Retry_Policy #Spring_Data_JPA #производительность #Quarkus #митап #тренды_java #мтс_true_tech

⏰ Starting soon! Join us for Quarkus Insights Ep. #254 with Jeremy Davis for "Domain Driven Design and Hexagonal Architecture - Part 2"
http://bit.ly/quarkusinsights

#java #quarkus #quarkusinsights

Jib can put a Quarkus fast-jar on a small runtime image without a Dockerfile. That is the easy part.

The useful checks come afterward: Java 25, UID 65532, a direct Java entrypoint, no shell, stable application layers, and an amd64/arm64 manifest.

I worked through the full path with Red Hat Hummingbird and Podman:

https://www.the-main-thread.com/p/quarkus-jib-hummingbird

#Quarkus #Java #Jib #ContainerSecurity