Skip to content
← Projects

Bildora

In progress

Personal project

A multi-tenant SaaS e-commerce and website builder - a 'Shopify-lite' for small-to-medium merchants, with an integrated storefront and back-office.

  • Java
  • Spring Boot
  • Next.js
  • TypeScript
  • PostgreSQL
  • Redis
  • RabbitMQ
  • Kubernetes

Highlights

  • Architecting a multi-tenant SaaS e-commerce and website-builder platform as an affordable Shopify alternative for SMB merchants.
  • Designing database-enforced tenant isolation with PostgreSQL 16 Row-Level Security (per-connection GUCs) on a fail-closed default, so the database - not application code - guarantees tenant boundaries.
  • Building an identity service with email/password (zxcvbn + HIBP), Google OAuth (PKCE/OIDC), magic-link login, TOTP MFA, and refresh-token rotation with family-based theft detection.
  • Modeling RBAC with nine seeded roles and a resource:action:scope permission registry, plus plan-based entitlements enforced across JWT, Redis, and Postgres.
  • Establishing a Kubernetes-native platform (K3s, Helm, ArgoCD GitOps) with a CloudEvents transactional-outbox event bus on RabbitMQ and Kong as the API edge.
Source ↗