Spring boot app backend coupled with Angular 13+ for front-end.
╭┄┄┄┄┄┄┄┄╮ ┌──────────┐ ┌──────────┐
┆ ☁ ┆ ←→ │ ☕ │ ←→ │ 💾 │
┆ Web ┆ JSON/HTTP │ Spring │ │ Database │
┆ Angular┆ │ Service │ │ H2 │
╰┄┄┄┄┄┄┄┄╯ │ │ └──────────┘
└──────────┘
- JDK 19
cd spring-boot-rest-api
./gradlew bootRun
cd angular-front-end
npm install
npm start
./ng test
./gradlew test
http://localhost:8080/h2-console/
See application.properties
for credentials.
See file Place API.postman_collection.json
- Implement TOP 10 OWASP API best practise
- Add JWT token authentication
- Add DockerFile for containerization
- Add audit logs
- Tool that can be integrated in a CI
- Integrate Static Application Security Testing (SAST) components. SAST scans the application code at rest to discover faulty code posing a security threat. Tools: SAST-Scan or OWASP dependency-check
- Integrate Dynamic application security testing (DAST). DAST tests the running application and has no access to its source code. Tools for web app scanner: Nikto Web Server Scan, OWASP Zed Attack Proxy (ZAP
- After implementing a Swagger it is possible to test the proper implementation of the openAPI specification by using Security Testing tool for dynamic assessment of an API’s security state like API clarity, Astra or Automatic API Attack tool
- Integration in GithubAction
- Make Gradle a multi module project
- Add MockMvc testing case
- Add E2E web testing