samkit

• Architected an authentication layer enforcing OAuth 2.0 (Authorization Code + PKCE) with DPoP-bound token binding and JWT validation, reducing token-hijacking and replay attacks. • Engineered an automated code-generation pipeline utilizing Orval and OpenAPI/Swagger specs, automatically compiling backend DTOs into strongly-typed TypeScript API client interfaces, eliminating manual API contract mapping and reducing frontend-backend integration bugs. • Developed RESTful API in Node.js/Express enforcing multi-tenant Role-Based Access Control (RBAC) for 3+ user tiers, implementing rate-limiting middleware. • Optimized client side rendering via route lazy loading, React memoization, code-splitting slashing initial page load latency by 30% and significantly reducing client-side memory. • Implemented comprehensive component test suites using Jest, React Testing Library, and Playwright, adopting TDD methodologies to maintain 90%+ code coverage across reusable UI components and eliminate client-side rendering regressions. • Built and integrated a scalable blog platform for CORE3 using Strapi (Headless CMS), implementing custom APIs for content management, optimizing data fetching.