Secure your Modular Monolith by pretending it's a cat
summary
Assumes a modular monolith that later splits modules out to a message broker and gives concrete, implementable defenses: include identity in every message (user ID or claims), use the mediator layer to sign outgoing messages in mediator with asymmetric keys and to validate signatures, encrypt per-recipient fields for partial-message GDPR-safe events, and limit broker abuse with rotate short-lived broker credentials (dynamic users or rotating tokens). Covers token-exchange vs hashed audit blobs, key‑management for versioned keys, and practical constraints for RabbitMQ/Azure Service Bus.
AI-written summary · about
chapters (10)
- 0:00Introduction to security
- 1:11Modular monolith overview
- 5:32Identity and message flow
- 10:20Authorization principles
- 13:38Signed messages
- 19:47Preventing unauthorized access
- 22:28Managing credentials
- 26:11Data personalization
- 29:06Token expiration strategies
- 34:57Versioning and conclusion
related talks
50mSecure your Modular Monolith by pretending it's a cat
43mSecure your Modular Monolith by pretending it's a cat
57mDistribu-ready with the Modular Monolith
43mModular Monoliths: The Architecture That Scales w Your Domain
01h 02mBuilding that glorious monolith. And carving it too.
59mMajestic Modular Monoliths
01h 00mDistribu-ready with the Modular Monolith
50mMajestic Modular Monoliths