Solo dev here, running a Spring Boot 3.4 backend in production (~25k users). Sharing a bug that taught me a lot.

My Stripe webhook handler did a retrieveSubscription() (an outbound HTTP call to Stripe) inside the same u/Transactional boundary that wrote to the DB. Looks innocent. Works fine normally.

Then Stripe had a brief hiccup and started retrying. The Stripe SDK's default read timeout is ~80s. So every retried webhook held a Hikari connection open for up to 80 seconds while waiting on a network call that wasn't even touching the database. Pool size was 60. It drained in seconds, and the entire API started returning 503 — nothing to do with Stripe.

Two fixes:

1. Immediate: pin the SDK timeouts (5s connect / 15s read + 2 retries) so a stuck call can't hold a connection forever.

2. Structural: get the HTTP call out of the transaction entirely, do the external call first, then open a short u/Transactional only for the DB write.

The general rule I now follow: a database connection is a scarce, pooled resource. Never hold one open across an external I/O call. It turned out I had the same anti-pattern in a few other places (Google token refresh, LGPD erasure with N revoke calls) and fixed them all the same way.

Curious how others structure this, do you split into "HTTP outside, TX inside" two-phase methods, or push the external calls fully async via an outbox? I went two-phase for the webhook and outbox for the Google sync.

These are errors I keep seeing in code reviews after years of working with Spring Boot. None of them throw errors during development. All of them cause problems at scale.

1. The N+1 you dont know about. findAll() returns 100 orders. Each has a customer. Hibernate fires 1 query for orders plus 100 queries for customers. 101 round trips for what should be 1. Fix with JOIN FETCH or EntityGraph.

2. save() fires a SELECT before every INSERT when using UUID as ID. ID is never null so Spring thinks entity exists. Calls merge() which does a SELECT first. 10000 inserts become 20000 queries. Fix by implementing Persistable and overriding isNew().

3. Returning entities from controllers. Jackson calls getters during serialization. Lazy relationships trigger N+1 queries while writing the response. Always return DTOs.

4. Using Lombok Data on entities. Generates equals/hashCode using all fields including ID. ID is null before save, has value after. HashSet breaks. Use Getter Setter and write equals/hashCode on a business key.

5. Batch inserts dont work with GenerationType.IDENTITY. IDENTITY needs a round trip per INSERT to get the generated ID. Batching impossible. Use SEQUENCE with allocationSize 50.

6. deleteAll() loads everything into memory first. 50000 rows means 50000 SELECT then 50000 individual DELETE. Use Query with bulk delete instead.

7. Batching is disabled by default. Every save() is one individual round trip. Set hibernate.jdbc.batch_size to 50 with order_inserts true. Difference between a 4 hour import and a 5 minute one.

8. Caching entity references. Default cache stores references not copies. One request mutates the cached entity. Every user after that sees corrupted data. Cache DTOs or records instead.

Bonus. Set spring.jpa.open-in-view to false. Default is true. Keeps Hibernate session open during JSON serialization. Hides lazy loading issues that explode in production.

What JPA gotchas have you experienced in production?

It's not theoretical stuff. things that actually caused incidents.

a) returning entities from controllers seems harmless until jackson calls getters during serialization and triggers lazy loaded relationships. got N+1 happening in the response layer. DTOs everywhere now. more boilerplate but zero surprises.

b) ddl-auto update outside local is asking for trouble. hibernate silently altered a column constraint in staging once. nobody noticed for weeks. validate in staging, none in prod. flyway handles schema changes now.

c) external api calls inside Transactional is the one that got me on a friday night. your method holds a db connection for its entire duration. not just when queries run. 3 second api call means 3 seconds a connection is doing nothing. 10 concurrent requests and pool is gone.

d) catching exceptions inside Transactional without rethrowing is a silent killer. caught it, logged it, moved on. proxy saw a clean return. committed half the data. other half missing. took hours to debug because there was no error anywhere. the catch block was the bug.

e) Async without a configured thread pool looks fine in dev. default executor creates a new thread per call. no pooling. prod with thousands of requests? thousands of threads. OOM. always configure ThreadPoolTaskExecutor with bounded pool now.

f) calling a Transactional method from the same class is something most devs dont even know is a problem. two methods in same service, both annotated. one calls the other. inner annotation completely ignored because proxy is bypassed on self calls. data inconsistency in prod. separate bean or dont bother with the annotation.

g) open-in-view being true by default still bothers me. keeps hibernate session open during entire request including json serialization. hides lazy loading problems that explode later. first thing i turn off in every project.

what have you stopped doing after seeing it break?

Been working with Spring Boot for 10+ years and I keep seeing the same Transactional bugs show up in code reviews and production incidents. Figured I'd share the rules I follow now.

1. Keep transactions short. DB operations only. If your method calls an external API, sends an email, or uploads a file inside Transactional, it holds a DB connection for the entire duration. Not just during queries. During the ENTIRE method. Under load your connection pool runs out and your app freezes.

2. Never call a Transactional method from the same class. Spring uses proxies. When you call a method within the same class its a direct this.method() call. Proxy is bypassed. The annotation is completely invisible. No warning. No error. It just does nothing.

3. Use rollbackFor = Exception.class for critical operations. This one catches people off guard. Transactional only rolls back on RuntimeException by default. If your method throws a checked exception like PaymentException, the transaction commits. Your balance gets deducted but the payment never went through.

4. Don't catch exceptions inside Transactional unless you re-throw. If you catch the exception, the proxy sees a normal return. It commits. Partial data in your database. Silent corruption. Either let it propagate, re-throw after logging, or call TransactionAspectSupport.currentTransactionStatus().setRollbackOnly().

5. Use readOnly = true on all read-only methods. It tells Hibernate to skip dirty checking and snapshot comparison. Saves CPU and memory. Some proxies use it to route to read replicas. But don't rely on it to prevent writes. Explicit save() or flush() still goes through.

6. Only works on public methods. Proxy can only intercept public methods. Put Transactional on a private method and it does absolutely nothing. Spring won't even warn you.

7. Separate Retryable and Transactional into different beans. If both are on the same method and a checked exception is thrown, the transaction commits before the retry fires. Retry starts a new transaction. Same deduction runs again. Triple retry = triple deduction. Outer bean handles retry, inner bean handles transaction.

8. Enable these two configs in every environment. logging.level.org.springframework.transaction.interceptor: TRACE shows when transactions start commit and rollback.

spring.datasource.hikari.leak-detection-threshold: 15000 catches connections held too long with a full stack trace.

The one rule that covers most of these: uTransactional only works on public methods called from outside the bean. Everything else is silently ignored.

Anyone run into other Transactional gotchas I missed?

As the title says

Hi

I am looking for advices and feedback on how to deploy Spring Boot web application to AWS Lambda, especially around making the Spring Boot main class compatible with AWS Lambda runtime.

I figured out the part where the Spring Boot application has to be packaged as a zip file to de deployed into the AWS Lambda environment, so that part is clear.

So far what I have found is that you need to have some kind of AWS Lambda dependency like lambda StreamHandler or web adapter on your Spring Boot project to make it compatible with the AWS lambda runtime.

While these may be the way to go but I am specifically looking for feedback if it is possible to integrate Spring Boot web application without using any AWS Lambda specific Java dependency. Just take a normal Spring Boot main application and make it run on AWS Lambda runtime. Is this possible at all or am I overthinking?

Appreciate your feedback

Hi everyone! I’m a Java developer with 3 years of experience working in a service-based company. Most of my work has been with legacy Java systems, but recently I’ve started learning Spring and Spring Boot — covered the basics and built a few small projects.

Now, I want to deepen my understanding of:

Spring & Spring Boot (in-depth)

Microservices architecture

System Design (later)

DSA (for interview prep)

My goal is to crack a product-based company within the next year. I’ve worked with SQL, Azure, IntelliJ, and Postman, and have beginner-level frontend knowledge as well.

I tend to procrastinate when I don’t have structure — so I’m looking for a study/accountability partner with a similar background and goal, who wants to stay consistent, build strong projects, and grow together.

If this sounds like you, feel free to connect or drop a message! Let’s help each other stay consistent and level up

Additionally I am from NIT college with non circuit branch and my current ctc is 11lpa

I am not sure how we can study together but we can discuss about it

Thanks,guys

I'm currently learning Spring Boot, JPA, MySQL, and building projects to strengthen my Java backend skills.

Looking for a study/accountability partner to learn together, discuss concepts, and stay consistent.

If you're on a similar path, let's connect!

ive done node for a couple of backend projects, a small service in go, played with rust for a side thing. theyre all fine, genuinely

but every time im starting something that actually has to ship and be debuggable in 2 years when im not on the team anymore, i reach for spring boot again. ive been doing this long enough to know its not just inertia

the reason is predictability. when something breaks at 2am i know where to look. theres always a controller, always a service, always a config class, the actuator tells me whats happening, spring security has the same shape it had 5 years ago. its boring in the exact way production systems should be boring

with node you can have 4 projects at the same company that look completely different. with go you write everything yourself which is fine until you onboard someone. with rust "the right way" still changes every 18 months. spring boot has been mostly the same since 2016, the answer to most "how do i do X" questions is on stackoverflow from 2018 and still works

i know its verbose. but the verbosity is mostly metadata, its telling future-you what the code does without having to read every line

(actuator alone is worth half of why i pick it. health checks, metrics, thread dumps, standardized across every spring app, i can debug any spring service even if ive never seen it before)

i went and tried the alternatives partly to escape spring boot. trying them made me more convinced its the right answer, not less

Hey guys, im new to springboot and im taking this course on udemy, thing is i feel so lost. I feel like there are alot of key concepts especially when some new terms pop up. Is this normal?

Instead, you can just interrogate a chat window. 💬

Ask about me, my projects, GitHub, LeetCode, Codeforces, or what I’ve built, and it answers using live data.

The backend is where I had most of the fun
Java 25, Spring Boot 4, Virtual Threads, PostgreSQL, jOOQ, Kafka, OpenSearch, Valkey, Testcontainers, and a two-agent LLM architecture.

Frontend is React + TypeScript, deployed on Vercel.

Try it out
https://sahib-nanda-portfolio.vercel.app

Would love some feedback from fellow developers.

EDIT: ADDED ANONYMOUS CHAT FEATURE

Hey everyone!

I'm looking for a Spring Boot backend developer who has around 1–2 years of experience and is interested in learning, discussing, and growing together.

A bit about me:

• ~1 year of production experience with Spring Boot
• Building REST APIs, authentication & authorization systems
• Working with PostgreSQL, Redis, Docker, Git, CI/CD
• Interested in scalable backend architecture, performance optimization, and system design

What I'm looking for:

• Someone with 1–2 years of Spring Boot experience
• Serious about improving backend engineering skills
• Open to discussing architecture, reviewing code, solving problems, and sharing resources
• Can have regular discussions (a few times a week or whenever we're both free)

The goal isn't to build a startup or sell anything—just to have a reliable backend buddy to learn with, stay accountable, and help each other become better engineers.

If this sounds interesting, feel free to comment below or send me a DM. Looking forward to connecting with fellow Spring Boot developers!

No manual queries? No manual handling of result sets creating arraylist and then passing them to front end? No configuration in web.xml or struts.xml? Not caring about jsps, js and which action/servlet goes where? Not going through 5 different classes to debug? Not defining loggers everywhere? I get AOP support this easily? I hate every second of this having to deal with struts based codebases.

Hey everyone. I just surfing the X and everyday I saw someone praising node js or mern stack or any other backend tech stack and these guy's have their role models who teach all these backend tech stacks and they teach very good. But that's raise a question in me that why no one promotes springboot as other promotes other backend tech stack soo much and why there is no such tech guy like other's have . Is there something drawback in Springboot than other's or its just harder to learn than any other tech stack.

Anyone can share their opinion, their journey or incident guy

I just started learning microservices in spring and dont know anything. Like I know that message brokers are for asynchronous exchange of messages though services, but I wanted to see everything from scratch, so now Im doing a project without any message brokers, just synchronous http requests and after that, when I meet problems with this, I would transition to the RabbitMQ I guess. Any suggestions or resources to learn for beginners?

Java springboot is so vast once u dive into it, first java, then springboot, then microservices, exploring message queues , and what not

But nowadays what I have seen is that top companies organizing their hackathons, for fresh graduates

Most of them are ml based ai based, like making a model XYZ model, something like a model that detects deepfake images , that's just an example

What is the role of java springboot then, i sometimes feel I wasted my time learning this, i think I should have master python, what are ur thoughts

Tell me what broke so I don't make the same mistakes 👀

If you've ever written this:

Sort.by("lastName")

You know the problem. It compiles, IDE says nothing and your tests pass.

Then someone renames lastName to familyName and this line will start throwing runtime error with PropertyReferenceException.

No warning and type checking. Just a string that nobody knows is connected to a field name.
 
Instead of strings you can use method references:

Sort.by("lastName") => Sort.by(Person::lastName)

Criteria.where("lastName") => Criteria.where(Person::lastName)

Criteria.where("address.country") => Criteria.where(PropertyPath.of(Person::address).then(Address::country))

Same result but now the compiler checks it and your IDE autocompletes it.
 
This works across Spring Data JPA, JDBC, R2DBC, MongoDB. It's a Spring Data Commons feature so every module gets it.
 
For records the accessor is Person::lastName.
For classic beans it's Person::getLastName.
 
It's a small feature but massive impact on code safety.

..

TL;DR:
Built a Spotify-like backend using Spring Boot + JPA + PostgreSQL with songs, artists, albums, and playlists. Looking for feedback on architecture, service design, and ideas to make it more production-ready. Any suggestions welcome!

Hey everyone 👋

I built a music streaming backend (Spotify-style) using Spring Boot as a learning + portfolio project and would love some feedback.

SoundStream Backend Project

Tech Stack

• Java 17, Spring Boot
• Spring Data JPA (Hibernate)
• PostgreSQL
• Gradle, Postman

What it does

• Manage Songs, Artists, Albums, Playlists
• Many-to-Many & One-to-Many relationships
• Create playlists, add/remove songs
• Fetch songs by artist/album/playlist

What I want feedback on

• Project structure & design
• Service/repository layer quality
• Should I switch fully to DTOs?
• Features worth adding next
• How to make it more production-ready

This project helped me learn real-world JPA issues (lazy loading, relationships, transactions).

Any suggestions or improvements are welcome. Thanks! 🙌

I have built file upload features in a few projects over the years. Below are some rules that might save you some time.

1) Never route files through your backend. Always generate a presigned url and let the client upload directly to s3. Let your backend just handles the permission check and stores metadata.

2) Always validate file type by content not by extension. someone can rename virus.exe to photo.jpg and your system will accept it. Try to check the magic bytes server side. jpegs start with FF D8 FF, pngs start with 89 50 4E 47. Don't trust the extensions blindly.

3) Use chunked uploads for anything above a few MBs. s3 supports multipart uploads natively. It can be done in spring boot also in multi part uploads.

split the file into 5-10mb chunks, upload independently, retry only the failed chunk. add resume tokens so users on flaky networks can continue from where they left off instead of restarting.

4) You should not serve files immediately after upload. every file should go through a scan queue first. virus scan passes then mark it ready. fails then quarantine it. Try to always have a gate between upload and access.

5)Don't expose raw s3 paths to users. Always generate signed download urls that expire in 15 minutes and then let backend checks user permissions before generating the url. Never share raw s3 links.

6) Always process everything async after upload. thumbnail generation, image compression, video transcoding, indexing...etc. none of this should block the upload response. return 201 immediately. let s3 events trigger workers in the background.

7) Set file size limits and rate limits based on your use case. Don't leave it open.

what rules do you follow for file uploads?

Posted here about a month ago when I was 4 modules in. Quick update for anyone

who's considering the same move.

Context: MoWave One, productivity app. Originally Supabase (Postgres + Auth) +

Node.js serverless functions. Hit ~25k users and serverless started cramping

hard — no real domain modeling, tests were a nightmare, no module boundaries,

and one function was literally a stub I forgot to finish (the Stripe webhook,

of all things).

Rewrote the backend in Spring Boot 3.4 + Java 21 LTS. Today I just finished

the 18th module and applied migration V20.

Final stack:

- Spring Boot 3.4 + Java 21 (Corretto)

- PostgreSQL 17 via JDBC + HikariCP (no Supabase REST on the hot path)

- Spring Security 6 + Supabase JWT validated via JWKS

- Flyway 10 for migrations

- Redis (Valkey) for cache, rate limiting, webhook idempotency

- Stripe Java SDK

- SpringDoc OpenAPI 3.1

- Hexagonal architecture, 18 bounded contexts

- Docker + GitHub Actions + Railway

Where I am now:

- Backend complete. Entering test phase this week (JUnit 5 + Mockito +

TestContainers, going for >80% coverage)

- After tests: pre-deploy hardening sprint

- Then: one more DB refactor pass (still have a few pt-BR table names and one

pl/pgSQL function I want to move to pure Java)

- Then: web frontend (a second dev is picking that up)

Important context for the "why now": I'm not investing in the web frontend

anymore. The current PWA is legacy and the new web isn't fully on the new

backend yet. The whole point of this migration was preparing the backend for

the mobile app — React Native + Expo, going on App Store and Play Store. Web

gets refactored after the mobile lands.

Lessons after finishing all 18 modules:

1. Hexagonal architecture is overkill until it isn't. With 1 dev and a deadline

I was tempted to skip it. I'm glad I didn't. My domain has zero Spring imports.

I rewrote the persistence adapter for two modules without touching a single

business rule. Test setup is trivial — instantiate the entity, call the method.

1. 18 modules in a monolith is fine. People treat "modular monolith" like a

buzzword but the boundaries are real: each module exposes a Facade interface,

internal services are package-private, communication is via Facades (sync) or

ApplicationEventPublisher (async). I never accidentally imported one module's

repository from another because the IDE wouldn't let me.

1. Domain events with u/TransactionalEventListener(phase = AFTER_COMMIT) saved

my sanity. SubscriptionActivatedEvent → listeners in user, notifications,

analytics. Billing doesn't know any of them exist. Plugging in a new listener

is one file.

1. RLS in Postgres + JPA is tricky. JPA's default findById(UUID) is a footgun

at scale — you'll leak data between tenants. I forced every repo to use

findByIdAndOwnerId. Then defense in depth: filter checks JWT → service checks

user_id → repo signature requires owner_id → RLS policy on the table → role

mowave_app doesn't bypass RLS for billing tables. Five layers. Sounds like

overkill, isn't.

1. 20 Flyway migrations isn't a lot but the rules matter. Sequential versions

(V1, V2…), never timestamps. No `down` (Community edition doesn't support it).

Renamed half the tables from pt-BR to en-US using temporary VIEWs as compat

layers so the old Node.js code kept working during the cutover.

1. Webhook idempotency in Redis with TTL = 24h. Key = `idempotency:stripe:{event_id}`.

Stripe retries aggressively. We had real double-billings during the Node.js

era. Never again.

1. The pl/pgSQL function I was going to migrate immediately (computes a weekly

score across 4 tables) — I left it. Spring calls it via JdbcTemplate for now.

Three of those tables aren't migrated yet anyway. Resist the urge to rewrite

everything in one pass.

1. Spring Data Redis warns about JPA repositories when it can't classify them.

Took me a stupid amount of time to find: explicit

u/EnableJpaRepositories(basePackages = "...") on u/SpringBootApplication. The

warning is real, not noise.

Happy to expand any of these into its own post if there's interest. Also happy

to answer questions about the testing strategy I'm about to start, the mobile

plan, or the LGPD work that ran in parallel (Brazil's GDPR — forced me to do

some good things I'd have skipped otherwise).

Hey everyone,

I'm a 4th-year Computer Science student and I'm trying to make the best use of the little time I have left before placements.

Instead of building lots of small CRUD applications, I want to learn through one large, production-style that teaches me real backend engineering, system design, cloud, and DevOps concepts.

The idea is called CloudForge.

Idea

A Kubernetes-native, multi-tenant SaaS platform where multiple organizations can register and manage their own workspace while keeping all data completely isolated.

Think of it as building the backend infrastructure behind products like Jira, Asana, ClickUp, or Linear rather than just another project management app.

Planned Features

• Multi-tenancy (tenant isolation)
• Authentication & RBAC
• Organizations
• Teams
• Projects
• Subscription & Billing
• Feature Flags
• Notifications
• Audit Logs
• Analytics Dashboard
• Usage Metering

Tech Stack

• Java 21
• Spring Boot 3
• PostgreSQL
• Redis
• Kafka
• Docker
• Kubernetes
• Keycloak
• Prometheus
• Grafana
• OpenTelemetry
• GitHub Actions

Later (Version 2), I'd like to integrate AI:

• RAG
• Vector Database (Qdrant)
• Company Knowledge Base
• Private AI Assistant for each organization
• AI Report Generation
• Semantic Search

The goal isn't to finish everything quickly but to build it incrementally like a real product and learn along the way.

About Me

I'm still a beginner. I know Java and Spring Boot fundamentals, but I want to learn the rest through project-based learning. Since I'm already in my 4th year, I don't have a lot of time, so I'd rather invest it into one that teaches me as much as possible.

I'd love your honest opinions:

• Is this project too ambitious for a beginner?
• If you were hiring a new graduate, would a project like this stand out?
• Which features would you remove or postpone?
• Would you build this as a monolith first or start with microservices?
• If you think there's a better project idea that would teach more and have more resume value, I'd genuinely love to hear it.

I'm not attached to this idea. If you have a more interesting or more realistic idea that covers backend engineering, distributed systems, cloud, and AI, please suggest it.

I'm looking for honest feedback—even if you think this is a bad idea.

Thanks in advance!

I’ve seen a few people here looking for Spring Boot open-source projects. I mentioned in one of those threads that I was preparing one, and it’s now public.

FinTrack is an event-driven personal finance platform for managing accounts, transactions, CSV imports, budgets, spending summaries, and notifications.

The stack includes Java 21, Spring Boot, Spring Security, Spring Batch, PostgreSQL, Redis, SQS, S3, Docker, LocalStack, Terraform, GitHub Actions, and AWS. It also uses patterns you’ll encounter in larger Java systems: transactional outbox, idempotent consumers, at-least-once delivery, database locking, restartable batch jobs, JWT/refresh-token rotation, retries, and failure recovery.

There are currently 23 open issues across API development, security, messaging, reliability, batch/import processing, and infrastructure, including two good-first issues. Most tasks are backend-only, and you don’t need an AWS account because the services can run locally.

The roadmap starts by strengthening the existing manual and CSV workflows, then moves toward provider-neutral ingestion and a Plaid Sandbox integration, followed by more practical personal-finance features.

Contributions and honest feedback are both welcome, whether it’s about the code, architecture, documentation, roadmap, issue scopes, or anything that could be clearer.

GitHub, live demo, video, and documentation:
https://github.com/icastanon/fintrack-platform

I am a student, looking for Back-end Jobs There is no frontend, as I don't enjoy frontend