In this post, I’ll be reflecting on our third and final sprint towards developing and implementing an Identity and Access Management system for Thea’s Pantry. Coming out of Sprint 2, we had an almost-fully-functional proof of concept which integrated a mock frontend capable of calling out to Keycloak to require authentication, getting an access token, and passing that token to the backend for authentication and validation. Our goal for sprint 3 was to fully implement production microservices for Keycloak, the IAMBackend, and the IAMFrontend. These goals may not have been explicitly defined like that at the beginning of the sprint, but that ended up being our objective. We also wanted to have finalized documentation that explains our implementation and design choices. Some of my personal work towards that goal was as follows: GitLab Documenting our low-level issues in GitLab and assigning them accordingly. I put additional focus/effort this sprint into properly linking related issues, b...
In this post, I’ll be reflecting on our second sprint towards developing and implementing an Identity and Access Management system for Thea’s Pantry. Coming out of Sprint 1, we had a better idea of Keycloak in general, and we had some basic frameworks for a fake frontend and fake backend. Our sprint goal for Sprint 2 was to fully integrate these components, so that we could provide a proof of concept for the entire workflow, as opposed to just one component. We wanted to be able to force authentication on a frontend page via a Keycloak login page, and then we wanted to be able to store the resultant access token from that interaction so that we can perform authenticated actions without ever talking to Keycloak again. Some of my personal work towards that goal was as follows: GitLab Documenting our low-level issues in GitLab and assigning them accordingly. I put additional focus/effort this sprint into properly linking related issues, blockers, and tracking various key information in co...
This post is for tasks 4 and 5 for CS-443 for Spring 2025. Since there is no #blogs-and-podcasts channel in the Discord, I am just posting them here. Task 4 The blog I found relating to the content for this course is https://blog.qasource.com/. This blog talks about a lot of quality assurance methodologies and best practices. I chose this blog because one of my colleagues actually recommended this close to the beginning of my career, and I have seen different posts on it over the years. Task 5 The podcast I found relating to the content for this course is https://www.garymcgraw.com/technology/silver-bullet-podcast/. This podcast talks specifically about penetration testing and different security practices. I chose a podcast with this focus because pentesting is one of my areas of expertise, and I listen to this podcast whenever a new episode comes out.
Comments
Post a Comment