Quarkus at DevConfCZ 2025

[insectengine]

Event Description: DevConf.CZ is an annual, free, Red Hat-sponsored technology conference for users, operators, administrators, and contributors to Free and Open Source technologies.

Date: June 12-15, 2025
Location: Brno, Czech Republic
Event Type: In Person

https://www.devconf.info/cz/

Session: Quarkus Security for Spring developers
Speaker(s): Michal Vavřík
Date/Time: Thursday, June 12th at 14:45–15:20 in room D0206
Track/Level: Beginner
Abstract: In this session, I'll introduce Quarkus Security architecture from a Spring developer perspective. I'll show how to configure, develop and test Quarkus application secured with OpenId Connect. Quarkus Security team is focused on a Developer Joy, and I'll show how the latest features like Dev Services for OIDC allow users to start right way, with zero configuration and literally no waiting for OIDC server to start. Then we will take existing Spring Boot application and migrate it to Quarkus in 20 minutes, with focus on security aspects. This way, you will learn how Spring and Quarkus security concepts compare next to each other.

Session: Quarkus Security in Action
Speaker(s): Michal Vavřík
Date/Time: Friday, June 13th at 12:30–13:50 in room A218
Track/Level: Beginner
Abstract: Have you built your Quarkus application and would like to learn how to secure it ? Do you have questions about your existing Quarkus Security solution ? Join Quarkus Security contributor Michal Vavrik to learn about Quarkus security architecture and how to apply its key features. During this lab, Michal will work with you to build a secure Quarkus application, answer your questions and help with:

• Configuring, applying, and combining authentication mechanisms. We will use OpenId Connect (OIDC) authorization code flow and Basic authentication during the lab.
• Combining two or more well-known OIDC or OAuth2 providers and using one of many available Quarkus OIDC tenant resolution options to choose the right provider for verifying the current request.
• Customizing the current security identity before the authorization constraints are applied to it.
• Enforcing Role-based access control with a @RolesAllowed annotation.
• Enforcing Permission-based access control with @PermissionAllowed and @permissionchecker annotations.
• Learning about HTTP security policies.
• Implementing OIDC access token propagation with a single @accesstoken annotation.
• Using Quarkus TLS registry to support HTTPS.

You will be well informed about and better prepared to work with Quarkus Security after the lab. Not a Quarkus user ? No problems, come along and see how it compares to other framework security implementations you are familiar with.

Session: Building Intelligent Apps with Quarkus and RAG: From Raw Data to Real-Time Insights
Speaker(s): Cedric Clyburn & Christopher Nuland
Date/Time: Saturday, June 14th at 14:00–15:20 in room C228
Track/Level: Intermediate
Abstract: Efficient data ingestion is foundational to modern AI-driven applications, yet developers face significant challenges: unstructured data, sensitive information management, and rising costs from excessive model fine-tuning. Fortunately, cloud-native Java runtimes like Quarkus simplify this process by seamlessly bridging data ingestion and AI workflows, primarily through Retrieval-Augmented Generation (RAG). In this hands-on technical workshop tailored for developers and AI engineers, we'll explore how Quarkus empowers teams to ingest, structure, and query data, making institutional knowledge instantly available to large language model (LLM) consumers.

Participants will:

• Structure Unstructured Data: Learn to extract actionable insights from PDFs, proprietary formats, and unstructured documents using the open-source Docling project, preparing your data for seamless AI integration.
• Deploy and Utilize RAG Effectively: Understand how RAG enables real-time retrieval and enhances generative responses without extensive fine-tuning. We’ll also cover targeted fine-tuning with InstructLab for specialized, domain-specific knowledge.
• Hands-On AI Development (Inner and Outer Loops): Practice building AI workflows locally using Podman AI Lab, ensuring sensitive data remains secure, and scale seamlessly into a Kubernetes-native environment, maintaining privacy and cost efficiency.

We'll culminate the workshop by constructing a practical, privacy-conscious application: a searchable, AI-powered ticketing solution inspired by systems like ServiceNow. Join us and discover how easily Quarkus and RAG can transform your raw data into secure, powerful, and instantly accessible business insights.