adesso BLOG

Traditionally, deployment pipelines use protected secrets to access cloud providers. These have to be managed in DevOps platforms and rotated regularly. OpenID Connect provides a modern approach: pipelines request short-lived tokens directly from the cloud provider. This blog post covers key aspects of this approach, current support from cloud providers and DevOps platforms, and shows an implementation using GitHub Actions and Azure.

Barrierefreiheit ist kein optionaler Aspekt in der modernen Softwareentwicklung, insbesondere für Anwendungen im öffentlichen Dienst, die den Anforderungen der BITV 2.0 und des Barrierefreiheitsstärkungsgesetzes (BFSG) entsprechen müssen. Automatisierte Tests spielen bei digitalen Produkten eine wichtige Rolle. In diesem Blog-Beitrag vergleiche ich die Tools QF-Test, Cypress Axe und die axe-core CLI hinsichtlich ihrer Fähigkeiten zum Testen von Barrierefreiheit.

In the early 2000s, Dojo laid the foundation for many concepts and techniques that are now considered standard. From modular programming to reusable components to asynchronous functions, Dojo provided innovative solutions at a time when there were no uniform standards for the web. In my blog post, I would like to introduce the Dojo Library.

Version control is a system that helps developers track, manage and secure changes to code. This blog post is aimed at non-developers and explains what version control is, what advantages it offers and how it can be used in your daily work, especially with GitLab.

Accessibility is a crucial aspect of modern web development. It ensures that digital products are accessible to all users, including people with disabilities. In this blog post, I'll show how automated accessibility testing can be implemented with cypress-axe. We'll also take a look at the relevant technologies.

Seit Spring Boot 2.3 werden detaillierte Fehlermeldungen aus Sicherheitsgründen standardmäßig unterdrückt. Das Frontend benötigt aber oft spezifische Fehlerdetails, um eine gute User Experience zu gewährleisten. In diesem Blogbeitrag zeige ich, wie du in Spring Boot Fehlerdetails sicher und gezielt an das Frontend weitergeben kannst - ohne die Sicherheit deines Projekts zu gefährden. In meinem Blog-Beitrag erfahrt ihr, wie ihr mit @ControllerAdvice, ErrorAttributes und Annotations eine maßgeschneiderte Fehlerbehandlung implementieren könnt.

Microservices are a prevailing trend in software architecture that breaks down large systems into independent units. They offer advantages, but are not always necessary. Alternatively, a modularised monolith can be useful, especially if the boundaries between microservices are fluid. In this blog post, I will discuss modularisation concepts in the Java ecosystem, with a focus on Spring Modulith.

Do you have a box of leftovers at home? A box where you don't know exactly what's in it. It could contain anything. If you're looking for something, then definitely have a look in this box. In our repos you will occasionally find boxes with names like "Common" or "Shared". This blog post explains how to sort them correctly.

The first article on this topic explained the basic concepts of Open Rewrite. The second article dealt with the technical implementation of recipes and this article discusses the use of Open Rewrite in the context of an organisation's application portfolio. The use of internal libraries, application portfolios and efficient use as a service will be discussed.