Passkey & TOTP Account Security
A security-focused account upgrade combining passkey registration and sign-in with authenticator-app TOTP, recovery boundaries, and existing PHP session rules.
Read case studyCloud storage workflow
A secure file-management module for large uploads, validation, malware inspection, object storage, and controlled downloads.
01 · The problem
Standard browser uploads were unreliable for large files, while direct public storage links created security and access-control concerns. The system also needed a practical inspection workflow before files became available.
02 · The solution
I designed a staged upload flow with chunk tracking, server-side validation, malware checks, storage metadata, and short-lived signed download links. Processing states were exposed clearly to the interface so users could distinguish uploading, scanning, ready, and rejected files.
03 · Key functionality
Resumable chunked uploads with progress and cancellation.
File type, size, ownership, and integrity validation.
ClamAV and external scanning integration points.
Private object storage with presigned access URLs.
Status-driven UI and secure download authorization.
04 · Constraints
Maintaining upload state across failed or repeated chunks.
Preventing unscanned files from being exposed prematurely.
Separating storage access from application permissions.
05 · System view
06 · Interactive system motion
This abstract simulation turns the architecture above into a small spring-and-collision system. Move or press inside the canvas to disturb it. It is a systems visualization, not customer footage or a product screenshot.
07 · Result
Next case study
Browse projects across marketplace systems, secure storage, SaaS payments, mobile backends, and external APIs.