Slide 1
Slide 1 text
Matt Raible | @mraible
December 7, 2021
Java REST API Comparison
Micronaut, Quarkus, and
Spring Boot
Photo by Evi T. on Unsplash
Slide 2
Slide 2 text
@mraible
Who is Matt Raible?
Father, Husband, Skier, Mountain
Biker, Whitewater Rafter
Bus Lover
Web Developer and Java Champion
Okta Developer Advocate
Blogger on raibledesigns.com and
developer.okta.com/blog
@mraible
Slide 3
Slide 3 text
No content
Slide 4
Slide 4 text
No content
Slide 5
Slide 5 text
No content
Slide 6
Slide 6 text
developer.okta.com
Slide 7
Slide 7 text
@mraible
Today’s Agenda
Why Java?
Build { REST, GraphQL } APIs with Java
Secure your APIs with OAuth 2.1
Build with Docker
Go Native with GraalVM
https://unsplash.com/photos/JsTmUnHdVYQ
Slide 8
Slide 8 text
@mraible
Why Java?
25+ Years
of use, abuse, and improvements
Open Source
code is available; many popular open source
frameworks and tools
Hugely Popular and widely used
by many enterprises and web-scale companies
Slide 9
Slide 9 text
@mraible
Download the Oracle builds of OpenJDK
https://jdk.java.net/17
Or Eclipse builds from Adoptium
https://adoptium.net
Get Started with Java 17
Slide 10
Slide 10 text
@mraible
Get Started with Java 17
Better yet, use SDKMAN!
curl -s https://get.sdkman.io | bash
sdk install java 17-open
Slide 11
Slide 11 text
Java Releases and Features
Slide 12
Slide 12 text
https://developer.okta.com/blog/2020/01/09/java-rest-api-showdown
Build REST APIs with Java
Slide 13
Slide 13 text
Serverless
💵 💸
https://unsplash.com/photos/glRqyWJgUeY
Slide 14
Slide 14 text
@mraible
sdk install micronaut
mn create-app com.okta.rest.app \
-b maven -f security-jwt
Get Started with Micronaut
Slide 15
Slide 15 text
https://micronaut.io/launch
Slide 16
Slide 16 text
package com.okta.rest.controller;
import io.micronaut.http.MediaType;
import io.micronaut.http.annotation.Controller;
import io.micronaut.http.annotation.Get;
import io.micronaut.http.annotation.Produces;
import io.micronaut.security.annotation.Secured;
import io.micronaut.security.rules.SecurityRule;
import java.security.Principal;
@Controller("/hello")
public class HelloController {
@Get
@Secured(SecurityRule.IS_AUTHENTICATED)
@Produces(MediaType.TEXT_PLAIN)
public String hello(Principal principal) {
return "Hello, " + principal.getName() + "!";
}
}
Slide 17
Slide 17 text
micronaut.security.enabled=true
micronaut.security.token.jwt.enabled=true
micronaut.security.token.jwt.signatures.jwks.okta.url=
https://dev-133337.okta.com/oauth2/default/v1/keys
Micronaut JWT Security
Slide 18
Slide 18 text
micronaut.security.enabled=true
micronaut.security.token.jwt.enabled=true
micronaut.security.token.jwt.signatures.jwks.okta.url=
https://dev-133337.okta.com/oauth2/default/v1/keys
Micronaut JWT Security
https://micronaut-projects.github.io/micronaut-security/latest/guide/#jwt
Slide 19
Slide 19 text
Install HTTPie (a better cURL)
$ install httpie
https://httpie.org
Slide 20
Slide 20 text
Test Micronaut with HTTPie
https://httpie.org
mvn mn:run
http :8080/hello
TOKEN=eyJraWQiOiJxOE1QMjFNNHZCVmxOSkxGbFFWNlN...
http :8080/hello Authorization:"Bearer $TOKEN"
Slide 21
Slide 21 text
Verify Micronaut API with HTTPie
Slide 22
Slide 22 text
@mraible
Get Started with Quarkus
mvn io.quarkus:quarkus-maven-plugin:2.5.1.Final:create \
-DprojectGroupId=com.okta.rest \
-DprojectArtifactId=quarkus \
-DclassName="com.okta.rest.quarkus.HelloResource" \
-Dpath="/hello" \
-Dextensions="smallrye-jwt,resteasy-reactive"
Slide 23
Slide 23 text
https://code.quarkus.io
Slide 24
Slide 24 text
package com.okta.rest.quarkus;
import io.quarkus.security.Authenticated;
import javax.ws.rs.GET;
import javax.ws.rs.Path;
import javax.ws.rs.Produces;
import javax.ws.rs.core.Context;
import javax.ws.rs.core.MediaType;
import javax.ws.rs.core.SecurityContext;
import java.security.Principal;
@Path("/hello")
public class HelloResource {
@GET
@Path("/")
@Authenticated
@Produces(MediaType.TEXT_PLAIN)
public String hello(@Context SecurityContext context) {
Principal userPrincipal = context.getUserPrincipal();
return "Hello, " + userPrincipal.getName() + "!";
}
}
Slide 25
Slide 25 text
mp.jwt.verify.publickey.location=
https://dev-133337.okta.com/
oauth2/default/v1/keys
mp.jwt.verify.issuer=https://
dev-133337.okta.com/oauth2/
default
MicroProfile JWT Security
https://www.eclipse.org/community/eclipse_newsletter/2017/september/article2.php
Slide 26
Slide 26 text
mp.jwt.verify.publickey.location=
https://dev-133337.okta.com/
oauth2/default/v1/keys
mp.jwt.verify.issuer=https://
dev-133337.okta.com/oauth2/
default
MicroProfile JWT Security
https://www.eclipse.org/community/eclipse_newsletter/2017/september/article2.php
Slide 27
Slide 27 text
No content
Slide 28
Slide 28 text
Test Quarkus with HTTPie
https://httpie.org
mvn quarkus:dev
http :8080/hello
TOKEN=eyJraWQiOiJxOE1QMjFNNHZCVmxOSkxGbFFWNlN...
http :8080/hello Authorization:"Bearer $TOKEN"
Slide 29
Slide 29 text
Verify Quarkus API with HTTPie
Slide 30
Slide 30 text
@mraible
Get Started with Spring Boot
http https://start.spring.io/starter.zip \
dependencies==web,oauth2-resource-server,native \
packageName==com.okta.rest \
name==spring-boot \
type==maven-project \
baseDir==spring-boot | tar -xzvf -
Slide 31
Slide 31 text
https://start.spring.io
Slide 32
Slide 32 text
package com.okta.rest.controller;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;
import java.security.Principal;
@RestController
public class HelloController {
@GetMapping("/hello")
public String hello(Principal principal) {
return "Hello, " + principal.getName() + "!";
}
}
Slide 33
Slide 33 text
Spring Security OAuth 2.0 Resource Server
https://docs.spring.io/spring-security/site/docs/current/reference/html5/#oauth2resourceserver
okta.oauth2.issuer=https://dev-133337.okta.com/
oauth2/default
Slide 34
Slide 34 text
Test Spring Boot with HTTPie
https://httpie.org
mvn spring-boot:run
http :8080/hello
TOKEN=eyJraWQiOiJxOE1QMjFNNHZCVmxOSkxGbFFWNlN...
http :8080/hello Authorization:"Bearer $TOKEN"
Slide 35
Slide 35 text
Verify Spring Boot API with HTTPie
Slide 36
Slide 36 text
@mraible
Startup Performance
Milliseconds
0
750
1500
2250
3000
Micronaut Quarkus Spring Boot
1,497
568
573
1,122
1,918
456
Dev Startup (mvn) Packaged Startup (java -jar)
Slide 37
Slide 37 text
@mraible
Build GraphQL APIs with Java
Why GraphQL?
Does your favorite framework support GraphQL?
Micronaut
https://micronaut-projects.github.io/micronaut-graphql/latest/guide
Quarkus
https://quarkus.io/guides/smallrye-graphql
Spring Boot
https://spring.io/projects/spring-graphql
Slide 38
Slide 38 text
@mraible
Secure your API with OAuth 2.0
https://aaronparecki.com/2019/12/12/21/its-time-for-oauth-2-dot-1
Slide 39
Slide 39 text
@mraible
Secure your API with OAuth 2.1
https://oauth.net/2.1
PKCE is required for all clients using the authorization code flow
Redirect URIs must be compared using exact string matching
The Implicit grant is omitted from this specification
The Resource Owner Password Credentials grant is omitted from this specification
Bearer token usage omits the use of bearer tokens in the query string of URIs
Refresh tokens for public clients must either be sender-constrained or one-time use
Slide 40
Slide 40 text
@mraible
Authenticate with OpenID Connect (OIDC)
What is OpenID Connect?
Does your favorite framework support OIDC authentication?
Micronaut
https://guides.micronaut.io/latest/micronaut-oauth2-okta.html
Quarkus
https://quarkus.io/guides/security-openid-connect-web-authentication
Spring Boot
https://docs.spring.io/spring-security/site/docs/current/reference/html5/#oauth2login
Slide 41
Slide 41 text
What about testing?
Slide 42
Slide 42 text
@mraible
Build with Docker
Create a Dockerfile
FROM openjdk:17-alpine
ARG JAR_FILE=target/*.jar
COPY ${JAR_FILE} app.jar
EXPOSE 8080
ENTRYPOINT ["java","-jar","/app.jar"]
Slide 43
Slide 43 text
@mraible
Build with Docker
Build your image
docker build -t .
Run your image
docker run -it -p8080:8080
Slide 44
Slide 44 text
@mraible
Build with Docker: Jib
Get Jibby with it!
mvn verify jib:build
Or build directly to your Docker daemon
mvn verify jib:dockerBuild
https://github.com/GoogleContainerTools/jib
Slide 45
Slide 45 text
@mraible
Build with Docker
Micronaut uses Jib, but you must configure plugins
Quarkus generates four Docker-related files
Dockerfile.jvm
Dockerfile.legacy-jar
Dockerfile.native
Dockerfile.native-distroless
Quarkus + Jib
mvn quarkus:add-extension -Dextensions="container-image-jib"
Slide 46
Slide 46 text
@mraible
Build with Docker
Spring Boot 2.3+ has built-in support
mvn spring-boot:build-image
Uses layered JARs for faster builds
dependencies
snapshot-dependencies
resources
application
https://spring.io/blog/2020/01/27/creating-docker-images-with-spring-boot-2-3-0-m1
Slide 47
Slide 47 text
@mraible
Use Micronaut CLI
mn create-app ...
mvn package -Dpackaging=native-image
gradle nativeImage
gradle dockerBuildNative
Go Native with GraalVM and Micronaut
https://docs.micronaut.io/latest/guide/#graal
Slide 48
Slide 48 text
@mraible
Go Native with GraalVM and Quarkus
Create an executable without GraalVM installed
mvn package -Pnative -Dquarkus.native.container-build=true
Then, build the image
docker build -f src/main/docker/Dockerfile.native -t \
.
And run it
docker run -it -p8080:8080
https://quarkus.io/guides/building-native-image
Slide 49
Slide 49 text
@mraible
Use start.spring.io to get plugins and profiles
org.springframework.boot
spring-boot-maven-plugin
${repackage.classifier}
paketobuildpacks/builder:tiny
true
org.springframework.experimental
spring-aot-maven-plugin
${spring-native.version}
Go Native with GraalVM and Spring Boot
Slide 50
Slide 50 text
@mraible
Go Native with GraalVM and Spring Boot
Add milestone repositories to your pom.xml
spring-milestones
Spring Milestones
https://repo.spring.io/milestone
spring-milestones
Spring Milestones
https://repo.spring.io/milestone
Slide 51
Slide 51 text
@mraible
Go Native with GraalVM and Spring Boot
Add Spring Native dependency
org.springframework.experimental
spring-native
0.11.0-RC1
Build the native application
mvn spring-boot:build-image
Slide 52
Slide 52 text
@mraible
How we fixed the Okta Spring Boot Starter
https://youtu.be/8vY-9tXlCW4
Slide 53
Slide 53 text
@mraible
Native Startup Performance
Milliseconds
0
25
50
75
100
December 2, 2021
61.8
18.4
19.8
Micronaut Quarkus Spring Boot
Slide 54
Slide 54 text
@mraible
Native Memory Used (MB)
Milliseconds
0
25
50
75
100
December 2, 2021
58
32
78
Micronaut Quarkus Spring Boot
Slide 55
Slide 55 text
@mraible
Tests Run on a 2019 MacBook Pro
Slide 56
Slide 56 text
@mraible
Demo Time!
https://github.com/oktadev/native-java-examples
Slide 57
Slide 57 text
Community
Slide 58
Slide 58 text
@mraible
Stack Overflow Tags
0
32500
65000
97500
130000
December 2, 2021
61
114,122
2,171
1,242
Micronaut Quarkus Spring Boot Helidon
Slide 59
Slide 59 text
@mraible
GitHub Stars
0
18750
37500
56250
75000
December 3, 2021
2,500
58,500
8,900
5,100
Micronaut Quarkus Spring Boot Helidon
Slide 60
Slide 60 text
star-history.t9t.io/#micronaut-projects/micronaut-core&quarkusio/quarkus&spring-projects/spring-boot
GitHub Star Growth
Slide 61
Slide 61 text
@mraible
Jobs on Indeed (US)
0
3250
6500
9750
13000
December 3, 2021
11,333
198
166
Micronaut Quarkus Spring Boot
Slide 62
Slide 62 text
@mraible
Twitter Followers
0
25000
50000
75000
100000
December 3, 2021
3,322
80,200
13,100
10,900
Micronaut Quarkus Spring Boot Helidon
Slide 63
Slide 63 text
Hot Web Frameworks https://hotframeworks.com
Slide 64
Slide 64 text
@mraible
JHipster Support 🤓
Micronaut Blueprint - github.com/jhipster/generator-jhipster-micronaut
- v1.0.2, 18 releases, 16 contributors, 382 commits
// TODO: Micronaut 3, Reactive, Microservices, GraalVM native images
Quarkus Blueprint - github.com/jhipster/generator-jhipster-quarkus
- v2.0.0-beta.1, 6 releases, 16 contributors, 550 commits
// TODO: Quarkus 2.3, Dev Services, Reactive, Microservices
Slide 65
Slide 65 text
https://developer.okta.com/blog/2021/01/20/reactive-java-microservices
Slide 66
Slide 66 text
https://developer.okta.com/blog/2020/08/17/micronaut-jhipster-heroku
Slide 67
Slide 67 text
https://developer.okta.com/blog/2021/03/08/jhipster-quarkus-oidc
Slide 68
Slide 68 text
Summary of latest update
https://twitter.com/mraible/status/1466812781454368778
Slide 69
Slide 69 text
@mraible
Action!
Slide 70
Slide 70 text
developer.okta.com/blog/tags/java
@oktadev
Slide 71
Slide 71 text
git clone https://github.com/oktadeveloper/okta-spring-webflux-react-
example.git
https://github.com/oktadev/native-java-examples
Use the Source, Luke!
Slide 72
Slide 72 text
Thanks!
Keep in Touch
raibledesigns.com
@mraible
Presentations
speakerdeck.com/mraible
Code
github.com/oktadev
developer.okta.com
Slide 73
Slide 73 text
developer.okta.com