Resume (PDF, opens in a new tab)
All projects

Professional · Built at hytGenX

Green Entertainment

Production entertainment platform with separate public and admin applications, built and operated end to end.

Role: Full-stack engineer
Role
Full-stack engineer
Ownership
Built and operated end to end
Scale
83K+ visitors / 30 days
Users
2,850+ registered

Overview

A live entertainment platform with a public site and a separate admin application. I built both applications and the API behind them, then ran the system in production.

Application architecture

  1. Public appNext.js
    Admin appNext.js
  2. AuthJWT access/refresh · OAuth
    GuardsRBAC · rate limiting
  3. Express APINode.js
  4. Content safetyXSS sanitization · SSRF-safe unfurling
    UploadsValidated file handling
  5. PostgreSQLPrisma ORM
Simplified. Both applications share one API and permission model.

What I owned

  • Public and admin Next.js applications backed by a Node.js/Express API with Prisma and PostgreSQL.
  • Authentication with JWT access/refresh tokens, OAuth sign-in, and role-based access control.
  • Security hardening for rich-text content, link unfurling, and file uploads.
  • Production deployment and ongoing operation.

Engineering challenges

User content without new attack surface

Rich text, link previews, and uploads are the usual entry points for abuse. Rich-text content is sanitized against XSS, link unfurling is guarded against SSRF, uploads go through secure file handling, and sensitive endpoints are rate limited.

Two applications, one permission model

The public and admin apps share one API. Access is enforced in the API with RBAC on top of JWT access/refresh flows.

Outcome

  • 83K+ visitors and 136K+ page views in a rolling 30-day period.
  • 2,850+ registered users.

Stack

Next.jsNode.jsExpressPrismaPostgreSQLJWTOAuthRBAC