JavaZone 2025 - de beste foredragene

Hvert år reiser vi på JavaZone, og som alltid kommer vi hjem fulle av inspirasjon. For oss handler konferanser ikke bare om å lære nytt, men også om å dele erfaringer, møte andre i bransjen og få påfyll av energi. 

En av grunnene til at JavaZone skiller seg ut, er at konferansen er helt fri for “reklame-foredrag”. Her er det utviklere som snakker til utviklere, og innholdet handler om ekte erfaringer, konkrete løsninger og reelle utfordringer. Det gjør at vi alltid sitter igjen med ny, relevant innsikt – uten salgspitcher forkledd som fag.

Vi spurte våre konsulenter hvilke foredrag de likte best i år og her er resultatet. I tilfeldig rekkefølge.

Kotlin Multiplatform & Compose: Unified Code, Native Experiences by Geoffrey Rekier

Kotlin Multiplatform (KMP) is revolutionizing cross-platform development by enabling code sharing across Android, iOS, web, and desktop—without sacrificing native performance. When combined with Jetpack Compose and Compose Multiplatform, developers can create beautiful, responsive UIs using a single Kotlin-based framework. In this session, we’ll cover: - How Kotlin Multiplatform simplifies code sharing - Using Compose for seamless frontend development across platforms - Structuring a KMP project for scalability and maintainability Whether you’re a mobile or full-stack developer, this session will help you unlock the full potential of Kotlin Multiplatform and Compose to build modern, cross-platform apps with ease.

Geoffrey is a seasoned software engineer with over 15 years of experience across a diverse range of projects. He has worked as a developer, architect, and team lead, contributing to both startups and large enterprises. With a strong background in JVM technologies and full-stack development, Geoffrey has built everything from small-scale applications to mission-critical core systems. Passionate about modern development practices, he enjoys sharing his experiences.

ADHD-hjernen som redningsplanke for prosjekter i krise med Jan Greger Hemb 

Forestill deg et IT-prosjekt der 50 millioner kroner er forduftet, prosjektlederen er utbrent, og utviklerne tyr til kokain for å holde tempoet oppe. Kommunikasjonen med kunden foregår kun via advokater, og konkurs truer. Dette er dessverre ikke en unik situasjon for meg. Jeg har gang på gang blitt kastet inn i slike katastrofeprosjekter, der dårlig planlegging, uklare krav og manglende risikostyring har ført til fullstendig kollaps. I dette foredraget tar jeg deg med bak kulissene på noen av de mest dramatiske prosjektene jeg har opplevd som konsulent. Du får høre om hvordan jeg, ved hjelp av prosessen min, og en fin mengde ADHD, har som oftest klarte å snu situasjonen – og noen ganger mislyktes fatalt. Lær av mine feil og suksesser, og få konkrete verktøy til å unngå at dine egne IT-prosjekter ender i kaos.

Greger er en erfaren fullstackutvikler med ekstra fokus på frontend og UX og brenner for å dele kunnskap. Dette har han gjort ved over 20 presentasjoner, over 10 youtube videoer, workshops og jobb som lærer. Over sine 13 år i bransjen som konsulent har han spesialisert seg på å dra i land prosjekter som har sklidd ut og trenger førstehjelp. Utover koding brenner han for reise, gaming og familielivet.

Hva er problemet med Helse-IT? av Christin Gorman 

Helseplattformen, Helseanalyseplattformen, Akson... IT-systemer i helsevesenet er stadig i media, og det er sjelden fordi de imponerer. Hva er det med helse som gjør det så vanskelig å lage gode IT-systemer? Kan vi gjøre det bedre? Hva er det vi trenger? Velkommen til et foredrag med litt historie, litt om dagens situasjon, og noen fremtidsvisjoner om IT-systemene i vårt offentlige helsevesen.

Christin er en JavaZone-veteran, og har levert noen av de mest sette presentasjonene på konferansen. Hun har 25 års hands-on erfaring som utvikler, og har de siste 15 årene engasjert seg spesielt for å forbedre løsninger i offentlig sektor. Ettersom Helse-sektoren har slitt spesielt mye i det siste, har hun rettet mye fokus i den retningen de siste årene.

Funksjonell kjerne, imperativt skall - en arkitektur på vranga av Magnar Sveen

 Hva skjer når databasen ikke ligger nederst i arkitekturdiagrammet, men ute på siden? Hvilke fordeler får vi av å skrive nesten all koden med rene funksjoner? Jeg har jobbet i systemer med FK/IS-arkitektur i ni år, og deler av det jeg har lært. 

Magnar Sveen er en glad programmør hos Mattilsynet. Han har laget noen videoserier (ZombieTDD, Emacs Rocks! og Parens of the Dead), holder gjerne på med sånn open source-greier, og er begeistret for funksjonell programmering.

Top 10 REST API Design Pitfalls by Victor Rentea

An entertaining review of the most common mistakes in designing an API, from the most outrageous goofs to the most dangerous "innocent" shortcuts. You'll see examples of: Breaking Changes, Domain Model Leak, Sensitive Data Exposure, Performance Issues, Endpoint Coupling, CRUD vs CQRS, PUT overload, Religious REST Fallacy, and Improper Error Handling. Collected with love from over 150 companies worldwide.

With two decades of experience, Victor is a Java Champion and Software Architect who dedicated his career to training thousands of engineers in the most entertaining and time-efficient way. The lessons learned from a decade of workshops at 150+ companies, Victor turned into countless talks at top-rated conferences, where he became known as “the guy with the soundboard”. In his (very little) spare time, he runs 1:1 coaching hours, and he organizes online meetups for European Software Crafters, the world’s largest developer community about improving code quality. For first-class training and consultancy services, check out https://victorrentea.ro<

 Securing LLM-Powered Applications: Overcoming Security and Privacy Challenges by Lize Raes and Brian Vermeer

 LLMs accessing the database and intelligent agents that perform online purchases? The possibilities for AI in applications seem endless but so are their security and data privacy risks. In this session, we’ll address common issues such as prompt injection, key leakage, abuse of private customer data for model training, legal restrictions, and more. In addition, we will show that general security issues in your systems can also influence the behavior and outcome of LLMs. During this session, you’ll get a solid overview of the vulnerabilities to avoid, strategies to ensure data privacy compliance and best practices for building secure LLM-powered applications.

Lize Raes is Product Manager and Developer Advocate at Naboo.ai, where she helps to build the developer productivity toolbox of the future. Known as the public face of the LangChain4j framework, she loves inspiring developers to apply the potential of AI in real-world applications. Committed to applying technology to societal challenges, Lize has embraced roles such as cochlear implant researcher at Ghent University, bioinformatics engineer for drug development software, and advisor to the Belgian government, where her COVID-19 prognosis model was used to steer drug and hospital supplies during the pandemic. In her free time, you will find her behind the piano or in her woodworking atelier.

Brian Vermeer is a well-known person in the Java community. He is a Developer Advocate for Snyk, Java Champion, and Software Engineer with over a decade of hands-on experience in creating and maintaining (web)applications. He is passionate about Java, (Pure) Functional Programming and Cybersecurity. Brian is a JUG leader for the Virtual JUG and the NLJUG. He also co-leads the DevSecCon community and is a community manager for Foojay. He is a regular international speaker on mostly Java-related conferences like JavaOne, Devnexus, Devoxx, Jfokus, JavaZone and many more. Besides all that, Brian is a military reserve for the Royal Netherlands Air Force and a Taekwondo Master / Teacher.

 Event sourced real time web applications with websockets by Johannes Brodwall

As the web is becoming the universal platform both for consumer facing systems and case management systems, users are expecting a more real-time experience. Manually refreshing the browser or periodic polling is no longer a sufficient user experience. Websockets is one practical way to solve this. With websockets, a server can easily push events to the web browser. Websockets is a very straight forward and "boring" technology - you simply send text strings from the server to the client or from the client to the server. The challenging is organizing these events into a well-structured state management. In this talk, I will demonstrate through programming how to develop of a full stack web socket application with Java and TypeScript. I will use OpenAPI to structure the state and events in a cross language way and generate the frontend and backend code from the specification. Through this process, we will explore words to describe the design of the messages that flow between the frontend and backend. The talk will show you how to think about the design of event sourcing in a structured way to create a highly responsive application and cover implementation challenges that must be met to create a high quality real time web application. Our users expect and deserve web applications that always show them the most updated state. Let's give it to them!

Johannes is an experience software developer who spends most of his time programming. He likes to combine full stack application development with software archeology. He is a programmer, college technology teacher, accountant (spare time), local politician (spare time) and technology politics spokeperson (spare time). He works for Gnist as a programming consultant, trainer and advisor.

30 Years of Java - How Did We Get Here? by Simon Ritter

May 23rd, 1995, saw the launch of not just a new programming language but an entire development and deployment platform. Initially targeted at the brand-new world of browsers and the World Wide Web, it quickly became the de facto standard for internet-scale enterprise applications. Remarkably, thirty years later, it is still always in the top three most popular languages in use by developers. How did this happen? In this session, we’ll take a whirlwind tour of the history of Java, recalling many of the milestones along the way. I started working for Sun Microsystems in February 1996, roughly the same week JDK 1.0 was launched. Through fourteen years at Sun, five at Oracle and nine at Azul, I’ll bring plenty of anecdotes (and some souvenirs). Be prepared for some serious developer nostalgia!

Simon Ritter is the Deputy CTO of Azul. Simon joined Sun Microsystems in 1996 and spent time working in both Java development and consultancy. He has been presenting Java technologies to developers since 1999 focusing on the core Java platform as well as client and embedded applications. At Azul, he continues to help people understand Java and Azul’s JVM products. Simon is a Java Champion and a two-time recipient of the JavaOne Rockstar award. In addition, he represents Azul on the JCP Executive Committee, the OpenJDK Vulnerability Group, as well as the JSR Expert Group since Java SE 9.

Lessons from the Columbia Space Shuttle Disaster for Software Development by Mark West 

On February 1, 2003, the Space Shuttle Columbia disintegrated during re-entry, claiming the lives of all seven astronauts aboard. This tragedy was not merely a technical failure - it was the result of systemic issues in communication, risk assessment, and organisational culture. This talk explores the Columbia disaster through the lens of software development. By examining the technical oversights and human factors that led to the shuttle's demise, we uncover critical lessons for building resilient software systems. Whether you're leading a development team or writing mission critical code, the lessons from Columbia remind us that reliability is not just a technical challenge but a human one. Join me to reflect, learn, and apply these insights to safeguard your projects and the people who depend on them.

Mark West is a seasoned technologist with over 25 years of experience in most aspects of software development. A lifelong space enthusiast, Mark is deeply fascinated by the history of space exploration and what it can teach us about innovation, leadership, risk management, and resilience. When not obsessing over space travel, Mark leads the Cloud and Platform division at Bouvet.

 The Past, Present, and Future of Enterprise Java by Ivar Grimstad

Over the last 30 years, Java has been the preferred technology for developing enterprise applications. Frameworks and approaches such as J2EE, Spring Framework, Java EE, Spring Boot, and Jakarta EE all contribute to this success story. The Jakarta EE 11, with features for increasing performance and developer productivity, such as support for virtual threads and the new Jakarta Data specification. This session will give you a history lesson of Enterprise Java as well as an overview of everything brought to you by Jakarta EE 11 with lots of code demos. We will also look forward and check out what's in the pipeline for Jakarta EE 12.

Ivar Grimstad is the Jakarta EE Developer Advocate at Eclipse Foundation. He is a Java Champion and JUG Leader based in Sweden. Besides advocating for the Jakarta EE technologies, Ivar contributes to the Jakarta EE specifications and is the PMC Lead for Eclipse Enterprise for Java (EE4J). He is also one of the specification leads for Jakarta MVC and represents Eclipse Foundation on the JCP Executive Committee. Ivar is also involved in various other open-source projects and communities. He is a frequent speaker at International developer conferences.

 Building AI Agents with Spring & MCP by Josh Long and James Ward

AI is here, but is it working for you? The name of the game is to give these AI models access to our enterprise systems and services and let ‘er rip! But it’s not always easy. We have a friend whose stress level trying to build production-worthy Python AI services was so high that his hairline receded TWELVE INCHES! Or that might have just been natural aging... Either way: he should’ve used Spring AI! Join us, AWS developer advocate James Ward and his trusty sidekick and Spring developer advocate Josh Long, and we’ll look at how to build MCP-enabled, RAG-ready, vibe-free, agentic systems and services in no time at all.

Josh (@starbuxman) has been the first Spring Developer Advocate since 2010. Josh is a Java Champion, author of 7 books (including "Reactive Spring") and numerous best-selling video training (including "Building Microservices with Spring Boot Livelessons" with Spring Boot co-founder Phil Webb), and an open-source contributor (Spring Boot, Spring Integration, Axon, Spring Cloud, Activiti, Vaadin, etc), a Youtuber (Coffee + Software with Josh Long as well as my Spring Tips series ), and a podcaster ("A Bootiful Podcast").

James Ward, a Professional software developer since 1997, with much of that time spent helping developers build software that doesn't suck. A Typed Pure Functional Programming zealot who often compromises on his ideals to just get stuff done. Currently a Developer Advocate for AWS.

 End-to-End Encryption in Data Streaming Platforms by Guillaume Dufrêne

Data breaches and privacy concerns now dominate the digital landscape. Securing data in transit and at rest has never been more critical. This presentation delves into the implementation of end-to-end encryption (E2EE) in popular data streaming platforms such as Apache Kafka and Apache Pulsar. We will explore the unique challenges and solutions associated with encrypting streaming data, ensuring that sensitive information remains protected throughout its lifecycle. This talk goes from general cryptographic techniques to a real-world use case that will illustrate the practical implications of E2EE in data streaming scenarios, highlighting performance considerations and trade-offs. Join us to learn how to enhance the security posture of your streaming architectures while maintaining high performance and scalability.

Guillaume is a passionated backend developer in its forties, and also a teacher and a glider pilot instructor. He works in a devops team in charge of AXAs SOA and EDA platform.