Notes / Secure integration
Almost nobody writes about WS-Security, mutual TLS or hardware security module file ingestion, because that work only exists inside banks and payment companies. These notes come from building it in production: what the specifications leave undefined, what breaks between two organizations, and what the runbook has to say.
How to ingest encrypted files from a hardware security module over SOAP in Spring Boot 3.5, secured with mutual TLS and WS-Security, and processed idempotently.