Projects

Reusable Nuxt module acting as a Backend-for-Frontend authentication layer. Server middleware automatically injects HMAC request signatures and manages session cookies. Establishes strict API contracts with end-to-end typed responses between frontend clients and the IAM service.

Standalone authentication service for identity management, OAuth2 provisioning, and MFA workflows. Features a custom HMAC-SHA256 protocol, session family token rotation with deterministic canary cookies, and multi-layer rate limiting. Pre-auth security includes Argon2id hashing and k-anonymity API integration.

Scoring-based traffic analysis engine distinguishing automated actors from legitimate users. Implements device fingerprinting heuristics, ASN/Geo-IP intelligence integration, and a verified 'Good Bot' pipeline utilizing reverse DNS to ensure legitimate SEO crawlers are never blocked.

Sleek Nuxt 4 portfolio deployed on Cloudflare Pages. Features custom Tailwind animations, fully typed Vue 3 components, and a secure serverless backend utilizing Hybrid SSR, Cloudflare Turnstile bot detection, and automated Resend integrations.

Full-stack developer publishing platform built with Nuxt 4, Drizzle ORM, and Nitro. Designed a secure media pipeline using signed S3 uploads, an AST-based Markdown parsing pipeline for XSS prevention, and optimized delivery using stale-while-revalidate caching.