LOADINGFETCHING CONTENT...
ALL PROJECTS
BACK-END
Sarahah App
An anonymous messaging platform where users share their profile links and receive honest, anonymous feedback. Built with a production-grade Node.js backend featuring event-driven email, Redis-powered OTP management, and Google OAuth.
KEY FEATURES
01Email/Password registration with OTP verification and Google OAuth2 sign-in
02JWT access tokens (1h) and refresh tokens (1y) with JTI-based Redis revocation list
03Single-device and all-device logout via logOutTime field invalidating all existing sessions
04Event-driven email system using Node.js EventEmitter for async background delivery
05OTP brute-force protection: max 3 attempts, 5-minute block, coordinated via three Redis keys with different TTLs
06Profile picture upload and update via Cloudinary with automatic old image deletion
07Public profile view counter with owner detection using silent authenticationVisitor middleware
08Google vs system account conflict guard preventing provider confusion vulnerability
09Anonymous message sending requires zero authentication
10AES-256-CBC encryption for phone numbers at rest
11Rate limiting: 50 requests per 15 minutes per IP
BUILT WITH
Node.jsExpress.js v5MongoDBMongooseRedisJWTGoogle OAuth2CloudinaryNodemailerJoiHelmetbcryptAES-256-CBCEventEmitter