Tech Blog

Spring Boot 4 and Java 25 require a full review of the entire platform: JSON contracts, security, observability, internal dependencies and runtime behaviour. The version upgrade should be treated as a migration of the entire platform.

This article focuses on a practical question: What should I check before migrating to Spring Boot 4.1.x, how do I perform the migration and what Java changes should be considered for future migrations?

Discover what APM is and how to use it to monitor the performance of your applications in real time. Learn its key concepts—transactions, spans, and traces—how to analyse metrics such as latency and error rate, and how to set up alerts to anticipate problems before they impact the user.

In this article, we explore essential best practices for designing and developing robust and scalable REST APIs, the de facto standard in modern systems integration. From architectural principles that ensure simplicity and resilience to API-first organisation, you will discover how to apply strategies that improve maintainability and developer experience. We delve into the correct use of HTTP methods, status codes, and structured error responses, as well as the consistent design of URLs, payloads, and versioning policies. In addition, we address critical aspects such as security through authentication and authorisation, performance optimisation with caching and pagination, and the implementation of rate limiting to protect resources. With practical recommendations and clear examples, this guide will help you create secure, efficient APIs that are ready to evolve in enterprise environments and distributed architectures. An essential reference for those seeking quality and scalability in their REST services.

In this article, we delve into the key concepts and strategies for securing Java applications with Spring Security, the leading authentication and authorisation framework. From its modular architecture to advanced configuration, you will discover how to implement access rules, manage roles and authorities, and customise filters to protect critical resources. In addition, we cover essential practices such as protection against common attacks (CSRF, CORS), the use of JWT for stateless authentication, and integration with OAuth2 and OpenID to securely delegate credentials. With clear examples and practical recommendations, you will learn how to apply security at the API and method level, optimising protection in enterprise environments and microservices. An essential guide for developers seeking robustness, flexibility, and scalability in their applications.

In this article, we show how EDICOM integrates Artificial Intelligence into every stage of the testing cycle to ensure faster, more accurate and consistent software. From structuring requirements and generating test cases to automation and knowledge management, you will discover how we combine AI and human expertise to enhance quality without compromising excellence.