Work

Long-form case studies. No screenshots — architecture, decisions and numbers instead.

Identity Provider · OAuth2 Authorization Server

Signet

A self-hostable central authentication server in TypeScript, Express and MongoDB — OAuth2 with PKCE, JWKS-published rotating keys, refresh-token rotation with reuse detection, RBAC and a full audit log.

100% test coverage
800+ tests
Deployed to production

Private repository — source not public

Read the case study

Nonprofit Platform for At-Risk Youth

Yesodot Eitanim

An end-to-end learning platform: a secure video LMS with signed-token playback and per-user moving watermarks, progress tracking, donations, certificates, full Hebrew/English RTL support and WCAG AA compliance.

Near-zero media cost
WCAG AA · IS 5568
Hebrew and English, RTL

Private repository — source not public

Read the case study