Spring Boot 4 vs Micronaut: битва фреймворков в эпоху виртуальных потоков и GraalVM

// Spring Security 7: Security как код
@Configuration
@EnableWebSecurity
@EnableMethodSecurity(prePostEnabled = true)
public class SecurityConfig {
    
    @Bean
    @Role("SECURITY_ADMIN")
    public SecurityFilterChain securityFilterChain(HttpSecurity http) {
        return http
            .oauth2ResourceServer(oauth2 -> oauth2
                .jwt(Customizer.withDefaults())
                .opaqueToken(Customizer.withDefaults())
            )
            .authorizeHttpRequests(authz -> authz
                .requestMatchers("/api/public/**").permitAll()
                .requestMatchers("/api/admin/**").hasRole("ADMIN")
                .requestMatchers("/api/**").authenticated()
                .anyRequest().denyAll()  # Secure by default
            )
            .csrf(csrf -> csrf
                .requireCsrfProtectionMatcher(
                    request -> !request.getMethod().equals("GET")
                )
            )
            .with(new QuantumSafeSecurityConfigurer(), Customizer.withDefaults())
            .build();
    }
    
    // Post-Quantum криптография
    @Bean
    public JWTDecoder jwtDecoder() {
        NimbusJwtDecoder decoder = NimbusJwtDecoder
            .withPublicKey(loadPublicKey())
            .signatureAlgorithm(SignatureAlgorithm.DILITHIUM5)  # PQ Crypto
            .build();
        return decoder;
    }
}

5.2. Micronaut Security 4

// Micronaut: Security через аннотации
@Singleton
public class SecurityRule extends AuthenticationFetcherRule {
    
    @Override
    public Publisher<Authentication> fetchAuthentication(HttpRequest<?> request) {
        return Mono.fromCallable(() -> {
            String token = request.getHeaders().get("Authorization");
            if (token != null && token.startsWith("Bearer ")) {
                return validateToken(token.substring(7));
            }
            return null;
        }).flux();
    }
}

// Аннотации безопасности
@Controller("/api/secure")
@Secured(SecurityRule.IS_AUTHENTICATED)
public class SecureController {
    
    @Get("/user")
    @Secured("ROLE_USER")
    public String userData() {
        return "User data";
    }
    
    @Get("/admin")
    @Secured({"ROLE_ADMIN", "ROLE_SUPERADMIN"})
    public String adminData() {
        return "Admin data";
    }
    
    @Post("/audit")
    @Secured(SecurityRule.IS_AUTHENTICATED)
    @Requires(condition = AuditCondition.class)  # Кастомные условия
    public HttpResponse<?> audit(@Body AuditEvent event) {
        // ...
    }
}

// Безопасность на уровне метода
@Singleton
public class RateLimitInterceptor implements MethodInterceptor<Object, Object> {
    
    private final RateLimiter rateLimiter;
    
    @Override
    public Object intercept(MethodInvocationContext<Object, Object> context) {
        String key = context.getTargetMethod().getName();
        if (!rateLimiter.tryAcquire(key)) {
            throw new TooManyRequestsException("Rate limit exceeded");
        }
        return context.proceed();
    }
}

Стоимость владения и ROI

6.1. Экономический анализ для предприятия

// Калькулятор TCO (Total Cost of Ownership)
public class TCOCalculator {
    
    public record TCOResult(
        double infrastructureCost,
        double developmentCost,
        double maintenanceCost,
        double trainingCost,
        double total3Year
    ) {}
    
    public TCOResult calculate(ProjectRequirements requirements) {
        // Spring Boot 4
        double springInfra = calculateInfrastructure(
            requirements.expectedRPS(),
            512,  // MB per instance
            0.85  // Utilization rate
        );
        
        double springDev = calculateDevelopmentCost(
            requirements.teamSize(),
            12,   // Months
            95000 // Developer cost per year
        );
        
        // Micronaut
        double micronautInfra = calculateInfrastructure(
            requirements.expectedRPS(),
            128,  // MB per instance
            0.92  // Higher utilization
        );
        
        double micronautDev = calculateDevelopmentCost(
            requirements.teamSize(),
            10,   // Faster development
            95000
        );
        
        return new TCOResult(
            springInfra, springDev,  // Spring Boot
            micronautInfra, micronautDev,  // Micronaut
            calculateTotal()
        );
    }
}

Результаты для типичного проекта (100K RPS, 10 разработчиков):