[baeldung.com] Build Your REST API with Spring [The Master Class]

[baeldung.com] Build Your REST API with Spring [The Master Class]

The Master Class
The canonical reference for building a production grade API with Spring. The 9 modules cover building and securing the API for production use, advanced evolution and discovery techniques, client code to consume it from the front end, comprehensive monitoring, continuous integration, continuous deployment, and more.

In addition to the detailed guides on implementation, you’ll also get the knowledge needed to run the API in production reliably and consistently. You’ll get templates of my time-tested Spring API implementations along with the understanding of how to use these to get your own APIs out and into the hands of clients quickly.

Everything I wish I had access to when I built my first API with Spring.


~10 Hours

1. The Basics of REST with Spring

1. The Anatomy of a REST API
2. Bootstrap a New Project
3. The User Management Project: A Full API
4. Application Startup: Executable Jar,
   Tomcat Deployment and Cargo
5. Properties and Project Settings
6. The Web Configuration

2. REST and HTTP Semantics

1. Exception Handling Good Practices and Sane HTTP Status Codes
2. The Basics of Input Validation
3. Good URI Practices (Nouns vs Verbs, Plural vs Singular, Identifiers vs UUID)
4. Leverage HTTP Verbs and Semantics
5. Content Negotiation: Support both XML and JSON
6. The Lifecycle of a Request

3. Simple Security for REST

1. Simple Spring Security for the API
2. Global URL vs Method Level Authorization
3. Understanding Cookies and the Session
4. Certificates and HTTPS for Tomcat
5. The Topology of Roles and Privileges

4. Consuming the API from AngularJS

1. Basic Ways to Consume REST from AngularJS
2. Dealing with CORS and Advanced CORS Scenarios (2 parts)
3. Working with OAuth2 and Tokens (JWT) from the front-end

5. Testing the API

1. The First Live API Tests - Introducing rest-assured (2 parts)
2. How To Build a Client for the API (2 parts)
3. How to test HTTP semantics
4. A Good Base API Tests for Any Resource
5. Contract Testing - A Special Kind Of Test

6. Advanced API Security: OAuth2 & JWT

1. How OAuth2 Works for REST (2 parts)
2. Set Up OAuth2 with Spring Security (2 parts)
3. Tokens, OAuth2 and JWT
   
4. Refreshing a token
5. How To Do OAuth from the Front End

7. Document, Discover and Evolve the REST API

1. Document the API with Swagger
2. The Basics of HATEOAS
3. Advanced Scenarios with Spring HATEOAS
4. How To Evolve the API without Breaking Clients
5. Versioning — The Last Resort

8. Monitoring and API Metrics

1. Fundamentals of Monitoring with Boot
2. Custom Metrics with the Dropwizard Metrics library
3. Monitoring Data over JMX
4. Displaying Metrics over HTTP
5. Production Grade Tools for Monitoring

9. DevOps: CI and CD Pipelines, Deployment

1. Setting Up Jenkins and The First Job
2. A Simple Jenkins Pipeline From Scratch
3. Remote Deployment for the API
4. From Continuous Integration to Continuous Deployment
   
5. Load Balance the REST API on EC2

10. Advanced API Tactics

1. ETags in REST
2. A Simple API Rate Limiting Implementation
3. Binary Data Formats in a Spring REST API
4. REST, Async and Long Running Requsts

11. A Reactive REST API (New)

• Moving Past the Servlet - going Reactive
• How to Build a Reactive REST API
• Understanding the new WebClient

12. New in Spring 5 (New)

• Using the New Bean Validation 2.0
• Using Kotlin to Build the API
• New Indexing Alternative to Classpath Scanning

13. New in Spring MVC

• What's Possible with the ResponseStatusException
• JSON Binding API, the Jackson alternative