https://windshock.github.io/en/tags/spring/Recent content in Spring on After the CodeHugo -- 0.145.0en-USTue, 25 Aug 2026 00:00:00 +0000https://windshock.github.io/en/post/2026-08-25-race-condition-toctou-mitigation/Tue, 25 Aug 2026 00:00:00 +0000https://windshock.github.io/en/post/2026-08-25-race-condition-toctou-mitigation/The same check-then-act race keeps appearing across services: purchase-limit bypass, one draw used by many requests, duplicate coupon cancellation, daily-reward overruns. I built a real stack (nginx + Tomcat×2 + shared Postgres + Redis) and measured which fix actually holds. Most of them need no Redis lock — just a DB conditional UPDATE and an affected-rows check.