Custom OAuth 2.0 Authorization Server + AI-powered portfolio API — built from the protocol spec up, owning the full auth and content lifecycle.
- ▸ RFC-compliant OAuth 2.0 AS: DCR (RFC 7591), PKCE S256 (RFC 6749), revocation (RFC 7009), discovery (RFC 8414)
- ▸ Salted ticket JWTs, single-use auth codes, two-layer ACL — security by spec, not by framework default
- ▸ BullMQ repeatable jobs: LeetCode stats hourly, GitHub stats 6-hourly, with idempotency checks