Manat Singh Brar

Bangalore

← All work

Row 06 of 07

Sign-in, roles and sessions

Area
Security
Level
Engineer, Senior
Result
TOTP and RBAC
Stack
TOTP · RBAC · Axios interceptors · SonarQube

Two-factor sign-in, role-based navigation and concurrent-session handling, and now the sign-in for an offline edition of the product.

  1. 01Password
  2. 02TOTP code
  3. 03Session
  4. 04Role
  5. 05Navigation
The path a sign-in takes, each step something I built.

Context

A security product is judged on its own front door first.

What I did

I built two-factor authentication with TOTP, role-based access control for navigation, and session handling for concurrent logins in Axios interceptors. I also closed a file-upload validation bypass.

As a senior engineer I am building the sign-in, first-run admin setup and password policy screens for an on-premise, offline edition of the product, and leading the SonarQube code-quality fixes.

Outcome

Two-factor sign-in and role-based navigation are in production. The on-premise edition is in progress.