104 lines
3.4 KiB
HTML
104 lines
3.4 KiB
HTML
<!doctype html>
|
|
<html lang="en">
|
|
<head>
|
|
<meta charset="utf-8" />
|
|
<meta name="viewport" content="width=device-width, initial-scale=1" />
|
|
<title>Gapido Auth Challenge</title>
|
|
<link rel="stylesheet" href="styles.css" />
|
|
</head>
|
|
<body>
|
|
<header class="topbar">
|
|
<span>Gapido Backend Challenge</span>
|
|
<div class="controls">
|
|
<button id="theme-toggle" type="button">Toggle theme</button>
|
|
<button id="prev" type="button">Prev</button>
|
|
<button id="next" type="button">Next</button>
|
|
</div>
|
|
</header>
|
|
|
|
<main class="deck">
|
|
<section class="slide active">
|
|
<p class="eyebrow">The problem</p>
|
|
<h1>Secure OTP auth for microservices</h1>
|
|
<p class="lede">Python • gRPC • MongoDB • Redis • RabbitMQ • Docker</p>
|
|
</section>
|
|
|
|
<section class="slide split">
|
|
<div>
|
|
<p class="eyebrow">Constraints</p>
|
|
<h2>What had to be proven</h2>
|
|
</div>
|
|
<ul class="tiles">
|
|
<li>gRPC auth boundary</li>
|
|
<li>secure OTP</li>
|
|
<li>refresh rotation</li>
|
|
<li>role-based access</li>
|
|
<li>async SMS delivery</li>
|
|
<li>production deployment path</li>
|
|
</ul>
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Solution shape</p>
|
|
<h2>Service architecture</h2>
|
|
<img src="../assets/diagrams/service_architecture.png" alt="Service architecture" />
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Code organization</p>
|
|
<h2>Clean architecture layers</h2>
|
|
<img src="../assets/diagrams/clean_architecture.png" alt="Clean architecture layers" />
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Auth flow</p>
|
|
<h2>OTP without storing plaintext codes</h2>
|
|
<img src="../assets/diagrams/otp_login_flow.png" alt="OTP login flow" />
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Token safety</p>
|
|
<h2>Refresh token rotation</h2>
|
|
<img src="../assets/diagrams/refresh_rotation_flow.png" alt="Refresh token rotation" />
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Extensibility</p>
|
|
<h2>Selectable SMS providers</h2>
|
|
<img src="../assets/diagrams/sms_provider_strategy.png" alt="SMS provider strategy" />
|
|
</section>
|
|
|
|
<section class="slide diagram">
|
|
<p class="eyebrow">Deployment</p>
|
|
<h2>Only Caddy is public</h2>
|
|
<img src="../assets/diagrams/production_deployment.png" alt="Production deployment" />
|
|
</section>
|
|
|
|
<section class="slide split">
|
|
<div>
|
|
<p class="eyebrow">Reliability</p>
|
|
<h2>What makes it reviewable</h2>
|
|
</div>
|
|
<ul class="tiles">
|
|
<li>Mocked SMS providers</li>
|
|
<li>gRPC tests</li>
|
|
<li>RBAC coverage</li>
|
|
<li>Compose validation</li>
|
|
<li>Health checks</li>
|
|
<li>Postman guide</li>
|
|
</ul>
|
|
</section>
|
|
|
|
<section class="slide">
|
|
<p class="eyebrow">Outcome</p>
|
|
<h2>Interview-ready microservice demo</h2>
|
|
<p class="lede">A focused auth service with clean boundaries, secure OTP, async messaging, provider strategy, and production deployment posture.</p>
|
|
</section>
|
|
</main>
|
|
|
|
<footer class="progress"><span id="counter">1 / 10</span></footer>
|
|
<script src="slides.js"></script>
|
|
</body>
|
|
</html>
|
|
|