amiirkhl/gapido-grpc-auth
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

docs: add architecture documentation and slides

Browse Source
This commit is contained in:
Amirhossein Khalili
2026-07-14 11:04:49 +03:30
parent e99060de41
commit c54f6edc1e
23 changed files with 765 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

103
docs/slides/index.html Normal file
View File

@@ -0,0 +1,103 @@
<!doctype html>
<html lang="en">
<head>
<meta charset="utf-8" />
<meta name="viewport" content="width=device-width, initial-scale=1" />
<title>Gapido Auth Challenge</title>
<link rel="stylesheet" href="styles.css" />
</head>
<body>
<header class="topbar">
<span>Gapido Backend Challenge</span>
<div class="controls">
<button id="theme-toggle" type="button">Toggle theme</button>
<button id="prev" type="button">Prev</button>
<button id="next" type="button">Next</button>
</div>
</header>
<main class="deck">
<section class="slide active">
<p class="eyebrow">The problem</p>
<h1>Secure OTP auth for microservices</h1>
<p class="lede">Python • gRPC • MongoDB • Redis • RabbitMQ • Docker</p>
</section>
<section class="slide split">
<div>
<p class="eyebrow">Constraints</p>
<h2>What had to be proven</h2>
</div>
<ul class="tiles">
<li>gRPC auth boundary</li>
<li>secure OTP</li>
<li>refresh rotation</li>
<li>role-based access</li>
<li>async SMS delivery</li>
<li>production deployment path</li>
</ul>
</section>
<section class="slide diagram">
<p class="eyebrow">Solution shape</p>
<h2>Service architecture</h2>
<img src="../assets/diagrams/service_architecture.png" alt="Service architecture" />
</section>
<section class="slide diagram">
<p class="eyebrow">Code organization</p>
<h2>Clean architecture layers</h2>
<img src="../assets/diagrams/clean_architecture.png" alt="Clean architecture layers" />
</section>
<section class="slide diagram">
<p class="eyebrow">Auth flow</p>
<h2>OTP without storing plaintext codes</h2>
<img src="../assets/diagrams/otp_login_flow.png" alt="OTP login flow" />
</section>
<section class="slide diagram">
<p class="eyebrow">Token safety</p>
<h2>Refresh token rotation</h2>
<img src="../assets/diagrams/refresh_rotation_flow.png" alt="Refresh token rotation" />
</section>
<section class="slide diagram">
<p class="eyebrow">Extensibility</p>
<h2>Selectable SMS providers</h2>
<img src="../assets/diagrams/sms_provider_strategy.png" alt="SMS provider strategy" />
</section>
<section class="slide diagram">
<p class="eyebrow">Deployment</p>
<h2>Only Caddy is public</h2>
<img src="../assets/diagrams/production_deployment.png" alt="Production deployment" />
</section>
<section class="slide split">
<div>
<p class="eyebrow">Reliability</p>
<h2>What makes it reviewable</h2>
</div>
<ul class="tiles">
<li>Mocked SMS providers</li>
<li>gRPC tests</li>
<li>RBAC coverage</li>
<li>Compose validation</li>
<li>Health checks</li>
<li>Postman guide</li>
</ul>
</section>
<section class="slide">
<p class="eyebrow">Outcome</p>
<h2>Interview-ready microservice demo</h2>
<p class="lede">A focused auth service with clean boundaries, secure OTP, async messaging, provider strategy, and production deployment posture.</p>
</section>
</main>
<footer class="progress"><span id="counter">1 / 10</span></footer>
<script src="slides.js"></script>
</body>
</html>