Summer is definitely here in the Northern Hemisphere, and if not hindering the activities of the community it certainly show by change of balance between announcement and releases over in depth technical article All the better for our readers, as I'm pretty sure you'll enjoy the numerous technical bites (or bytes) from last week !

Technical bytes

So if you like techcrunch and in depth article, you are in for a treat this week. First, let's start with alternative language and take a look at the Ceylon TypeScript Loader (GSoC project). From there, you should move quite naturally to some more high level client technologies, and see What is new in Android Client with Hawkular. Of course, if you prefer to stay on the language level, there is also this very interesting article on Null and not-null @DiscriminatorValue options. See ? Only good stuff out there !

Now, let's move to a more high level overview. with this passionating article on Visualizing Integration Applications. It's clearly a broad (and thus complex) topic, but this article does a fair job at at both describing the state of art and how we got here, but also sum up what are the current solutions and best practices. Kudos to its author Bilgin Ibryam.

Last, but not the least, Eric D. Schabell describes a Vaadin powered solution, using the Red Hat Cool Store demo, but also illustrating, at the same time, a cool usage of the JBoss BRMS framework.

Keycloak going "legit" : Red Hat Web Single Sign-On !

Keycloak has been a thriving project since its inception, and if you follow the weekly carefully, you must have seen many news, article and frequent releases from the project. And this is why, I wanted to echo here a news coming from the Red Hat JBoss Middleware blog, that may have not reach the JBoss Community: Red Hat announces Integrated Web Single Sign-On and Identity Federation. Indeed, Red Hat has decided to have a product based on Keycloak, and anyone will soon be able to request support and/or expertise if needed. Congratulations to the project and the community, this is a big achievement !

Infinispan & Docker - a mix in Heaven

Infinispan is a very powerful and flexible project, and I'm for one certainly happy to that there is now Improved Infinispan Docker image available , whiich hopefully will enable people to easily setup and play with the project. So, time to discover the bleeding edge of Infinispan on Docker !

Releases, releases, releases...

Well for once, and this must be a record, there is only one release in the last days ! But still a good one   :

• Weld: Arquillian container Weld 2.0.0.Beta1 released!

That's all for this week, please join us again for the next installment of the JBoss Editorial where we will endeavor to bring you more interesting articles written by members of the JBoss communities. And stay up to date with latest developments by following @jbossdeveloper on twitter.

Many things happened this week but I'll take a selfish moment and start with a couple of articles I wrote. As I mentioned earlier in the week, it's been (over) 10 years since JBoss was acquired by Red Hat and it's been a great decade for open source enterprise middleware from Red Hat! Every one of our customers, partners and community members deserves a round of applause!!

Next up I had to write some clarification text around the MicroProfile work we announced back at DevNation. Take a look if you are still confused but let me summarise here for some people who appear to be unclear about how open source works: it's an upstream, open source effort to gain experience from communities, vendors and individuals, around developing microservices with enterprise Java; it's not a standard, though it going to use various standards, and eventually once we believe we have something worth standardising we'll make the right next move.

Talking about things we announced at DevNation or Summit, Eric has written a summary article for those people who couldn't make it this year. Nice to see he included the killer keynote demo In a separate article Christina writes about a JBoss Fuse Integration workshop she, Eric and Siamak did at Summit - well worth checking out!

On to some non-Summit related activities this week. Let's start with Ceylon, where Stef talks about some modularity changes in the language as well as their Android support.

We've had a few releases this week too, including the first Hibernate OGM 5 maintenance release, Teiid 9.0.1, Hawkular Services 0.0.5 Final and Hawkular Metrics 0.17.0 (well done guys, for multiple releases!). The Hawkular team also wrote about scaling stateful services. Finally for this week, Gunnar has written about how you can upgrade Hibernate ORM in WildFly, something which is a lot simpler since their latest release of Hibernate last week 5.2.1.

OK, that's it for this week. And in light of our 10 year anniversary, I'll end with: Remember we love you, and Onward!

Welcome to this new weekly Editorial.  As DevNation2016 gets closer we take a break to take you on another spin through some of the events, announces, releases that are going on within the  JBoss Communities and beyond.

Keycloak 2.0.0 - The maturity path

The launch of the Keycloak 2.0.0 release not only corresponds to new lines of code, bugs fixings or publications but as announced by Stian Thorgersen to a new story for the project itself as a new brand Web site has been designed,

new features will be implemented within the next releases, etc ...

One of the core new feature proposed by this release is the "Authorization service" which allows to centrally define and manage fine-grained permissions for the services :

- Resource protection using fine-grained authorization policies and different access control mechanisms

- Centralized Resource, Permission and Policy Management

- Centralized Policy Decision Point

- REST security based on a set of REST-based Authorization Services

- Authorization Workflows and User-Managed Access

- The necessary means to avoid code replication across projects(and redeploys) and quickly adapt to changes in your security requirements

Eclipse Neon

The Eclipse Foundation on June 22 announced the availability of its Neon release, the eleventh annual coordinated release train of open-source projects from the Eclipse community.

The Neon release includes 84 Eclipse projects where we have participated consisting of more than 69 million lines of code, with contributions by 779 developers, 331 of whom are Eclipse committers. Last year's release train, the Mars release, had 79 projects. While it is not possible to present all the new features, we can nevertheless highlight these points reported :

- Usability & performance of the Javascript Tooling has been improved like its integration with Grunt, Gulp frameworks & Chromium V8 Debugger

- Improvements and resurrection of Eclipse JavaScript tooling and the Eclipse Standard Widget Toolkit (SWT) to make Eclipse run more smoothly on more recent platforms as stated by Max Rydahl Andersen

- New JSon Editor

- Updated PHP Development Tools Package (PDT)

- Improved support for Docker Tooling

- Introduces the Eclipse User Storage Service (USS) that enables projects to store and retrieve user data and preferences from Eclipse servers

- New projects/plugins supporting Gerrit (EGerrit), Gradle (Buildship), Paho (Internet of Thing), Android Tooling

Oxygen, which is what the twelfth Eclipse release train will be named, is scheduled for release in June 2017

Fresh news

- Future of Apiman   As Red Hat has announced the acquisition of the Api Management Saas 3Scale vendor this week, the Apiman Project Leader's Eric Wittman has decided to speak about the future of Apiman Project, the challenges that we have to tackle in order to make Apiman & 3Scale stronger, make proprietary technology OpenSource and reenforce our positon on the Api Management market. Apiman's project is not dead at all and many new opportunities will arise from the merging of both projects

+

- Hystrix as Circuit Breaker Bilgin Ibryam, within his blog about "Create Resilient Camel applications with Hystrix DSL" details how the NetFlix Hystrix technology supports the Circuit Breaker pattern. This new EIP pattern enriches the collection already proposed by the Java Integration Framework Apache Camel. It is important to notice that the Hystrix library implements more than the Circuit Breaker pattern as it also does bulkheading, request caching, timeouts, request collapsing, etc. To be complete, the Circuit Breaker Pattern and Hystrix are not suffisent to design a distributed application where it will be required to combine additional Camel patterns like the Throttler, Delayer, ... & good practices toi handle correctly the Exceptions, Timeout, ...

Conferences, Events

Don't miss these incoming events where our fabulous coders will talk about :

- DevOps, OpenShift, Drools, Fabric8, Camel, IoT, Hibernate, WildFly Swarm, Microservices, Reactive, Security - June 26-29, San Francisco, USA -  http://www.devnation.org/

- Linux Conferences - August 22-24, Toronto, Ontario - http://events.linuxfoundation.org/events/linuxcon-north-america

Releases, release, releases ....

• Keycloak 2.0.0.CR1 Released
• RichFaces 4.5.17.Final is out
• WildFly Swarm 1.0.0.CR2 launched

I hope this week's editorial has provided you with something of interest, please join us again next week when we will bring you more news from JBoss and the JBoss Communities.

Is Open Source cooperative friendly ?

While Open Source has been around for several decades, it is still puzzling for the industry how to either use it, implement it or just respect the spirit of it. This first article, called Beyond the Hype Cycle; Co-operative Open Source gave an interesting outlook on Open Source and how the mechanics of co-operative (such as Cooperative UK) could interact with it.

Techbits

If you are interest in AeroGear or Javascript in general, you should definitly check out this article on UnifiedPush, Promises and You - and see for yourself if it fulfills all of it's promises ! Along the same line, there is also a quite intriguing article on Node.js Javascript Client 0.3.0 out with improved stability and API docs.

However, if you feel that Java still rules, and you prefer it over Javascript, maybe it's time to give a chance to of the best framework out there: Drools ! Indeed, a new Tutorial oriented user guides for Drools and jBPM

have been released. Maybe an opportunity to learn it. After all, it may give you a reason to attend the upcoming Drools & jBPM: DecisionCamp And RuleML 2016, 6-9 July New York...

Evangelist's Corner

Our team of evangelist is relentless and of course, last week gave the opportunity to one of the most prolific of them, Eric D. SChabell, to release not one, but two very interesting articles. I especially recommend the second one, who brings Java developer out of their comfort zone, but for good reasons:

• How to get your App Dev on with JBoss Travel Agency in the Cloud (video)
• App Dev Cloud Stack - Open interoperability critical to success

Events

As the Red Hat Summit and the DevNation are coming up in a couple of weeks, it is for sure time to start taking a peek at the content of both conference. And the official blog of DevNation just released a couple of article about it:

• Magic: The Gathering mini-tourney – DevNation Blog
• Kubernetes CodeStarter with Google Cloud Platform – DevNation Blog

Releases, releases, releases...

• Teiid has been quite active this week and produced two releases, first Teiid: 9.0 CR2
• to give the community a chance to try out the upcoming 9.0 and Teiid: 8.13.5.
• Keycloak 1.9.7.Final
• JBoss Forge 3.2.2.Final

That's all for this week, please join us again for the next installment of the JBoss Editorial where we will endeavor to bring you more interesting articles written by members of the JBoss communities. And stay up to date with latest developments by following @jbossdeveloper on twitter.

I wanted to start the weekly editorial out this week around "open" vs "open source".  Nicholas Gerasimatos, Cloud Evangelist, wrote an article The difference between ‘open’ and ‘open source’.  Open referring to an Open API that is freely available but closed source and proprietary. As Nicholas indicates, “open” alone may not be enough to give you the interoperability and flexibility that an organization is seeking.  Open Source could be the better option for the organization as it adheres to open standards, the source code is freely available and the solution can be modified  without violating a license.  The JBoss Community and the projects provide the source code for the ability to easily make modifications required to meet an organizations business needs.

This is a good segway into a decision on the Google vs Oracle Copyright suit.  Google won a jury verdict that kills Oracle Corp.’s claim to a $9 billion slice of the search giant’s Android phone business and may give comfort to programmers who write applications that run across different platforms without a license.  Schmidt told jurors that, based on his “many years of experience” with Java, he believed Google was permitted to use the APIs without a negotiated license, as long as the company relied on its own code. Sun promoted them as “free and open,” and not sold or licensed separately from Java, he said.

Now on to the happenings in our open source community!

Releases

• Keycloak 1.9.5.Final Released -  We've increased the default password hashing intervals to 20000. Yes, you read that right. We've actually recommended using 20000 for a while now, but the default was only 1. This is a clear trade-off between performance and how secure passwords are stored. With 1 password hashing interval it takes less than 1 ms to hash a password, while with 20000 it takes tens of ms.  For the full list of resolved issues check out JIRA and to download the release go to the Keycloak homepage.
• Teiid 9.0 CR1 Released - Teiid 9.0 CR1 is now available.  This is a very large release compared to most with 238 issues addressed so far.
• Wildfly Swarm 1.0.0 CR1 - CLI Support, Enhanced standalone.xml support, SwarmTool, Resource Adapter archives, JPA fraction with PostgreSQL, Examples with WildFly Camel, Datasource configuration settable by properties
• Hibernate Search version 5.6.0.Beta1 - The Elasticsearch integration made significant progress with over 60 task resolved.

Open Source Champions

• Vlad Mihalcea introduces Mark Paluch, who, among other projects, is one of our Hibernate OGM project contributor - Meet Mark Paluch, a true open-source champion.
• Vlad Mihalcea also introduced us to Sergey Chernolyas for his contribution to the OrientDB integration in Hibernate OGM - Meet Sergey Chernolyas | Planet JBoss Developer
  

Red Hat Cloud Suite

https://allthingsopen.com/2016/04/20/red-hat-cloud-suite-modernizing-development-and-operations/

Eric Schabell, Red Hat Evangelist, shared a article and video on the Red Hat Cloud Suite.  The original article authored by James Labocki, Red Hat Product Marketing Manager, the original article can be found at AllThingsOpen.com.  With the release of the Red Hat Cloud Suite there are a few interesting use cases that we wanted to present that showcase solutions using this product.  The article and video walks you through one of these use cases.The application showcased is a microservices application that leverages JBoss middleware technologies on top of the Red Hat Cloud Suite infrastructure.

Red Hat Cloud Suite is an integrated solution for developing container based applications on massively scalable infrastructure with all the management required to operate both. With OpenShift Enterprise, organizations can build microservices based applications allowing for greater change velocity. Also, they can reduce friction between development and operations by using a continuous integration and deployment pipeline for release. Red Hat OpenStack Platform allows organizations to deliver massively scalable public-cloud like infrastructure based on OpenStack to support container based applications. Finally, Red Hat CloudForms provides seamless management of OpenShift and OpenStack along with other major virtualization, private, and public cloud infrastructures. Best of all, these are all built from leading open source communities without a line of proprietary code – ensuring access to the greatest amount of innovation. It also comes with access to Red Hat’s proactive operations offering, Red Hat Insights allowing you to compare your environment with the wisdom of thousands of solved problems and millions of support cases.

Microservices

• Christian Posta, Principal Middleware Architect, shared two articles with us this week:
  • Why Microservices should be event driven: Autonomy vs Authority - I’ve been working on a series of articles showing how to build microservices using an event-driven approach (which IMHO is the only real way to build microservices or… any complex distributed architecture). I’ll explore DDD, CQRS, Event-sourcing, even streaming, complex-event processing and more. I’m using a reference monolith applicationbased on Java EE that uses all the typical Java EE technology and dives deep into what makes it tick, what drawbacks it has, and how to evolve it to a microservices architecture. I’ll show implementation details all the way from containers (Docker, Kubernetes) to the JVM layer (Spring Boot and WildFly Swarm) to the application architecture (events, commands, streaming, raw events, aggregates, aggregate roots, transactions, CQRS, etc). Hopefully it will be ready for my Red Hat Summit talk in San Francisco in June! Follow me on twitter @christianposta for updates on this project.
  • 3 easy things to make your microservices more resilient - One of the advantages of building distributed systems as microservices is the ability of the system as a whole to withstand faults and unexpected failures of components, networks, compute resources, etc. These systems are resilient even in the face of faults. The idea behind this resiliency seems simple: if our monolith fails, everything for which it’s responsible fails along with it; so let’s break things into smaller chunks so we can withstand individual pieces of our app failing without affecting the entire system.
• Gary Brown shared with us the Monitoring Microservices for Application Performance, Distributed Tracing and Business Transactions - Although distributed systems and the concept of services have been around for a long time, the current trend towards microservices has added some new dimensions to the management problem.  The architectural approach leads to business applications comprised of a larger number of simple interacting services, each focused on specific business capabilities, and being responsible for their own data management. This has the benefit of allowing each service to be independently deployable, generally using automated continuous delivery. When used in a cloud environment, it facilitates dynamic scaling of individual services as required, and enables parts of the business application to be upgraded independently with minimal impact, allowing faster turnaround for fixing bugs and adding new features.  The downside of this dynamic, scalable and flexible architecture is being able to understand how your business application is operating, and when necessary tracing the execution path of a particular invocation through the multitude of services potentially geographically distributed.

Fuse

Paolo Antinori shared with us Dynamic Blueprint Files with JEXL -  In this post I’ll show how to add a little bit of inline scripting in your Apache Aries Blueprint xml files. I wouldn’t call it necessarely a best practice, but I have always had the idea that this capability might be usueful; probably I started wanting this when I was forced to use xml to simulate imperative programming structures like when using Apache Ant.

Thanks for being a part of the JBoss Community and stay tuned for the next Weekly Editorial! 

Kenneth Peeples, Shadow-Soft Director of Technical Services

kpeeples@shadow-soft.com

@ossmentor

www.shadow-soft.com

Welcome to another edition of the JBoss Weekly Editorial where we bring you up to speed with all that has been happening across the JBoss Communities.

Is Oauth2 secure enough ?

This week, we have debated a lot around Oauth2 after the publication of this post "Introducing TAuth: Why OAuth 2.0 is bad for banking APIs and how we're fixing it". This article suggests that OAuth2 is broken because client authentication is not strong enough. But as mentioned by Stian Thorgersen, there is nothing which prevent to authenticate the client using just an id and secret but any http based authentication mechanism (Basic, Digest) is permitted. Moreover, it is important when the architect designs the solution that he/she reviews the different possibilities offered to reenforce the security of the platform like mutual TLS, Token Expiration, Token introspection to intercept and revoke the client if required. Oauth2 like TLS and SSL are sometimes complex to use or to position correctly within a project and this is the reason why we are working hard to develop the project Keycloak in order to simplify the management of such SSO Architecture !

Evangelist's Corner

- Healthcare Demo by Christina Lin using Camel, HLT Dataformat & Mciroservices technology

- When JRubyFx meets Hawkular and help to design the GUI by Heiko Rupp

- Setup a Vacation Request Process using jBPM by Eric Schabell

Conferences, Events

Don't miss these incoming events where our fabulous coders will talk about :

- Infinispan at GeeCon 2016

- Camel, Microservices, Fabric8, Security, Apiman, Vert.x at JBCNConf 2016

- OpenShift, Mobile, Push Notification, HTTP/2, CDI at RivieraJUG 2016

Releases, release, releases ....

• KeyCloak 1.9.4.Final Released
• Apache Camel 2.17.1 is out
• New Docker Community Images - 6.4.0

I hope this week's editorial has provided you with something of interest, please join us again next week when we will bring you more news from JBoss and the JBoss Communities.

Welcome to another edition of the JBoss Weekly Editorial! This past week has been full of quite a bit, so we’ll just get right to it.

Releases

That’s right, we’ve been hard at work bringing more quality software to you all. This past week saw many releases across a wide range of projects, some even having multiple releases in the same week!

• Weld 2.3.4.Final next release of the 2.3 stable branch - See the change log for issues fixed
• apiman 1.2.4.Final - Notable features: Deletes, Logging in the Gateway, Circuit Breaker Policy - See changes in JIRA
• Forge 3.11.Final - Read the announcement
• Hibernate Search 5.5.3.Final - Get up to speed on the release
• Hawkular Inventory 0.15.0.Final — A smaller release, but important nonetheless
• Teiid 8.13.4 — See the official post
• Weld 3.0.0.Alpha16 — View the JIRA release notes
• Wildfly Swarm 1.0.0.Beta8 — Great things are coming!
• Keycloak 1.9.3.Final — JIRA release notes for a minor version

That’s it for the releases this week, look for more next week!

Demos

• CDK 2.0 Install Kit Demo by Eric Schabell
• Red Hat JBoss Fuse Healthcare integration by Christina Lin

The CDK, or Container Development Kit, is a pre-built development kit for writing container based application on Red Hat Enterprise Linux. Give it a spin regardless of the OS you’re running!Christina walks us through the Healthcare demo in the first part of a new demo series. The demo involves five different parties with multiple data languages involved. She’ll continue to break down the demo in the coming weeks, but it is a more realistic demonstration with multiple integrations and data translations.

Google Summer of Code

As we approach summer (at least in the northern hemisphere) students looking for something to do, at least those who are enthusiastic about tech, turn to Google Summer of Code. Once again, JBoss has had the honor of been selected as a mentoring organization! On Friday April 22nd Google announced the following ten students assigned to work with JBoss. There were many additional proposals, more than 70 in all! We’d like to thank everyone who submitted and look forward to working with you in the coming months.

• Idel Pivnitskiy: AeroGear WebPush and UnifiedPush Server integration
• rohitmohan96: Ceylon Markdown
• Lucas Werkmeister: Ceylon TypeScript Loader
• Samuel Richardson: Drools Rules in Minecraft
• Anton Gabov: Smart HTTP/2-based protocol for Infinispan
• Austin Ko: Hawkular-agent For Vert.x
• mincongh: Hibernate Search: JSR 352 batch job for re-indexing entities
• Anuj Garg: Improve existing Android client of Hawkular
• Tugba: Teiid HDFS Translator/Connector
• dimcho: Test scheduling for large test suites