- FastAPI
- PostgreSQL
- Redis
- Pytest
A pluggable authentication backend supporting JWT, session auth, OAuth, two-factor authentication, refresh token rotation, and role-based access control.
- Designed a pluggable auth architecture using the Strategy pattern — JWT and session auth share one interface and swap via configuration, without touching route handlers.
- Implemented refresh token rotation with reuse detection and token-family revocation.
- Built TOTP two-factor authentication with QR enrollment and hashed backup codes.
- Added Redis-backed account lockout before database access to reduce brute-force load.