Module 01 · 4 lessons
Request and HTTP boundaries
Follow one order request from production architecture through a thin controller, bounded request validation, and stable failure contracts.
16-lesson production course
Follow one flash-sale order service from its HTTP boundary to its durable state, security policy, operational evidence, production-like tests, and incident recovery loop. Each module states what its evidence proves—and what it cannot prove.
Three ordered modules
Complete the lessons in order so later transaction, operations, and recovery decisions retain the same incident context.
Module 01 · 4 lessons
Follow one order request from production architecture through a thin controller, bounded request validation, and stable failure contracts.
Module 02 · 3 lessons
Keep local transactions explicit, diagnose the SQL that JPA actually produces, and operate typed configuration without confusing profiles with secrets.
Module 03 · 9 lessons
Deny access by default, expose bounded operational evidence, prove production-sensitive behavior against PostgreSQL, and recover from incidents deliberately.
Course library
Use these article cards for direct access while preserving the ordered modules above as the primary study sequence.
Backend Aug 5, 2026 10 min read
Build a production-minded Spring Boot order service by separating HTTP, application, data, security, configuration, operations, testing, and incident-recovery layers.
Backend Jul 1, 2026 5 min read
Learn Spring Boot REST controllers, including @RestController, request mappings, DTOs, validation, status codes, error responses, and testing.
Backend Aug 5, 2026 10 min read
Separate Spring Boot request-shape validation from authorization and concurrency-safe business invariants, including nested DTO and collection validation.
Backend Aug 5, 2026 10 min read
Design safe Spring Boot error responses with ProblemDetail and RFC 9457 while respecting MVC, filter, security, async, and committed-response boundaries.
Backend Aug 5, 2026 12 min read
Design Spring application services and transactions that preserve local order invariants without hiding proxy, rollback, thread, remote-call, or side-effect boundaries.
Backend Aug 5, 2026 11 min read
Diagnose Spring Data JPA performance with query, SQL, plan, row, pool-wait, and user-latency evidence instead of relying on fetch-strategy folklore.
Backend Aug 5, 2026 11 min read
Use typed Spring Boot configuration, deliberate property precedence, environment profiles, secret injection, and drift evidence without exposing operational control planes.
Backend Aug 5, 2026 12 min read
Design ordered Spring Security filter chains, deny-by-default request and method authorization, resource ownership checks, and safe browser boundaries.
Backend Aug 5, 2026 11 min read
Operate Spring Boot with minimal Actuator exposure, safe health groups, liveness and readiness boundaries, low-cardinality metrics, and graceful shutdown.
Backend Aug 5, 2026 11 min read
Use Spring test slices, full-context contracts, Testcontainers PostgreSQL, migrations, security, and failure injection without overstating production equivalence.
Backend Aug 5, 2026 10 min read
Troubleshoot Spring Boot incidents from evidence through reversible mitigation, rollback, and recovery verification across correctness, users, and resources.
Java Aug 18, 2026 5 min read
Use Java 21 virtual threads for blocking backend tasks while keeping CPU, connection pools, downstream limits, context, and pinning explicit.
Java Aug 18, 2026 5 min read
Diagnose Java thread starvation, unbounded queues, lock contention, virtual-thread pinning, downstream overload, and failed cancellation with evidence.
Java Aug 19, 2026 5 min read
Diagnose production JVM performance from user impact through CPU, garbage collection, memory, threads, containers, and durable outcomes.
Java Aug 19, 2026 4 min read
Use Java 25 class histograms and heap dumps to test retention and memory-leak hypotheses while controlling pause, disk, and data exposure.
Java Aug 19, 2026 5 min read
Turn JVM performance hypotheses into controlled canary changes with representative load, rollback, resource budgets, and user-outcome verification.
FAQ
It connects Spring MVC, validation, transactions, JPA, security, Actuator, Testcontainers, JVM diagnostics, and incident response through one production order-service scenario.
The new production lessons document Spring Boot 4.1 as the mainline and call out Spring Boot 3.5 compatibility boundaries that teams must verify against their selected dependencies.
Yes. The REST controller lesson remains a cross-reference in API Design while becoming the controller foundation inside this Spring Backend sequence.