DevRank | System Record

// PROBLEM_STATEMENT

Challenge

Develop a highly secure, data-intensive evaluation platform. The system required strict access controls and complex data fetching to analyze developer metrics accurately. Key obstacles included:

>Enforcing Admin-only onboarding (disabling public self-registration).

>Handling secure password setup via expiring Magic Links.

>Integrating OTP-based email login flows securely.

>Protecting internal APIs with cryptographic signatures.

>Resolving severe dashboard performance issues caused by fragmented data fetching.

// SYSTEM_ARCHITECTURE

Solution

High level architecture of the application.

Due to the sensitive nature of the evaluation data, the authentication architecture was custom-built to ensure zero unauthorized access.

Instead of relying on standard selective column fetching which caused database bottlenecking, the architecture was refactored to an "Amazon-style" full-data fetch, combined with a custom stats dashboard drill-down system on the client side, drastically improving load times.

#
Auth Pipeline (Admin-Driven): The system blocks self-registration. Admins create a user entity with a null password. The system then generates a cryptographically signed, 1-hour expiring JWT token embedded in an email Magic Link to allow the user to securely set their bcrypt-hashed password.
#
OTP Integration: Integrated Firebase Auth to handle One-Time Password (OTP) email login flows, ensuring a frictionless but highly secure secondary access method.
#
Signed API Endpoints: All internal data-fetching routes are protected by signature-based middleware, rejecting any requests that don't carry the correct algorithmic signature from the authenticated frontend.

Visit website

// DEPLOYED_MODULES

Girish Gaikwad

Girish Gaikwad - Portfolio

EXPLORER

[ SYS.ARCHIVE_RECORD ] - DevRank

Challenge

Solution

Technologies

NextJS

TailwindCSS

NodeJS

MongoDB

Github API

Vercel

More Applications

eqrev

Recovery