Tag: 백엔드공부
All the articles with the tag "백엔드공부".
-
Feature-by-Feature Study #2 — JWT Authentication: An Access Pass the Server Doesn't Remember
How JWT solves the weakness of the session approach (the server having to remember every session). Covers the structure that packs information into the token itself (header, payload, signature), the trap that the payload is just base64, not encryption, code for creating and verifying tokens with jjwt, and the new problem JWT introduces (no revocation).
-
Studying by Feature #1 — Session-Based Authentication: Why Doesn't HTTP Remember Me?
I decided to dig into features like login/auth, reservations, and payments one by one. The first topic is session-based authentication. Covers authN vs authZ, the fundamental problem caused by HTTP being stateless, how sessions work like a 'locker number tag,' Spring Security, why passwords are hashed with BCrypt, and the weaknesses of the session approach.
-
Spring Boot #6 — Looking Into JVM Memory and GC, and a Connection Pool Bottleneck Experiment
I watched the heap with jps and jstat, and printed out GC logs. From the heap structure split into Young/Old, to the contrast with C's manual memory management, to reproducing a bottleneck where reducing the DB connection pool to 1 turned a 2-second task into a 6-second one.
-
Spring Boot #5 — Servlets, Embedded Tomcat, Thread Pools, and the WAS Layer
Every time I fired off a curl request, a new thread got added. Here's a breakdown of how Tomcat pre-hires workers and assigns requests to them, the balance between thread pools and DB connection pools, and the confusing dual identity of 'Apache'.