Graduation project: a TypeScript monorepo connecting court owners, players, and the badminton community. Real-time slot booking with Redis-backed holds, VietQR wallet payments with an append-only ledger, and skill-based matchmaking — split across independent Express services behind an API gateway with a shared RabbitMQ event bus. Benchmarked the gateway at 635 req/s with 196 ms p95 latency.

Security Developer on a ~9-person ride-hailing platform. Built the standalone auth-service from scratch: RS256 JWT issuance with key rotation and a JWKS endpoint, OTP login for customers/drivers, TOTP-based MFA for admins, per-route Redis rate limiting, and refresh-token rotation with replay revocation. Authored repeatable Zero Trust audits validating RBAC/ABAC across 15/15 access-control cases, blocking all 11 unauthorized attempts.

An online badminton court booking platform (v1) that eliminates double-booked slots and duplicate payments through real-time availability with short-term slot holds and QR payments confirmed by webhook. Serves customers booking courts, front-desk staff handling check-ins and refunds, and admins managing pricing and revenue — built as independent, containerized microservices communicating over a message bus.

An Express + MongoDB backend with asynchronous RabbitMQ messaging, covered by an automated Mocha/Chai integration test suite.

A CRUD web application built with Node.js handling record management and PDF parsing, with a plain HTML/CSS front end.

An MVC CRUD app for products and suppliers with EJS views, method-override routing, and Swagger-documented REST APIs.

A full CRUD web application with EJS layouts, session-based authentication, flash messages, bcrypt hashing, and Swagger API docs.

A web app with Passport.js local authentication, express-session, bcrypt password hashing, and EJS views over MongoDB.

An authentication demo using Express cookie-based sessions with a MongoDB session store and bcrypt-hashed credentials.

An experiment exploring cookie and session authentication flows with Express, express-session, and MongoDB.

A JWT token-based authentication service with Express, jsonwebtoken, bcrypt hashing, and MongoDB.

A standalone Passport.js authentication service with express-session, bcrypt, and EJS views over MongoDB.

A minimal authentication example with Express, cookie-parser, and MongoDB — a compact reference for the core auth flow.