Job Application API

A production grade Job Applications API designed for enterprise recruitment platforms. Built with NestJS and TypeScript, it handles secure authentication with refresh token rotation, 4 role RBAC with ownership verification, and real time webhook delivery with HMAC SHA256 signing for downstream integrations.

Challenges

• 1Implementing secure JWT auth with refresh token rotation without blocking legitimate users
• 2Designing a webhook delivery system with HMAC SHA256 signing that handles retries and failures gracefully
• 3Building a 4 role RBAC system with ownership verification that scales without becoming unwieldy

Outcomes

• ✓Full Swagger documentation for API consumers
• ✓Rate limiting to prevent abuse
• ✓Deployed on Railway with CI/CD pipeline