ANADI NATU

🚀 Backend-Focused Full Stack Developer | Spring Boot & Microservices

+91-8318428125

anadinatu2001@gmail.com

Lucknow, India

About Me

Backend-focused full-stack developer experienced in building Spring Boot microservices, secure authentication systems, and distributed architectures. Strong in JWT / OAuth2 security, inter-service communication, caching, and resilience patterns, with production-style system design experience. I enjoy crafting clean architecture that scales — from hexagonal domain separation to gateway-level JWT propagation — and bringing those systems to life with React / Angular frontends.

Backend

🍃 Spring Boot ☕ Java 🔄 REST APIs 🏗️ Microservices 🌐 Spring WebFlux 🔌 OpenFeign 💡 Resilience4j 🐰 RabbitMQ 📨 Kafka

Security & Auth

🔐 JWT (RS256) 🛡️ OAuth2 / Google & GitHub 👥 RBAC 🔒 BCrypt 📱 OTP (Twilio / Email) 🏛️ Spring Security

Architecture & Data

🔷 Hexagonal Architecture 🏛️ MVC 🐘 PostgreSQL 🗄️ MySQL 📊 JPA / Hibernate ⚡ Caffeine Cache 🧠 Redis 🌐 Eureka / Gateway

Frontend & Tools

⚛️ React / Redux 📐 Angular 17 🌊 RxJS 🐳 Docker 🔧 Git ☁️ Cloudinary 📧 JavaMailSender 🔍 AOP Logging

DevOps & Cloud

☁️ AWS EC2 🚀 CI/CD (GitHub Actions) 🌐 Nginx + Certbot SSL ❤️ Spring Boot Actuator

My Projects

Quiz Application

Spring Boot API Gateway JWT RabbitMQ OpenFeign Angular

Microservices architecture — API Gateway, Auth, Quiz, Question, and Notification services — with new-user records fanned out via Feign (retried 5× with backoff) to keep each service's local replica in sync.
Gateway-level JWT authentication — a global filter validates every request before it reaches a downstream service, whitelisting only public/internal routes.
Header-based identity propagation — validated identity is forwarded as trusted headers instead of re-parsing the JWT in every service, powering method-level authorization checks downstream.
Role-driven quiz workflows — Curators create questions and assemble quizzes from a category-filtered pool; Participants attempt quizzes with correct answers stripped from the payload before scoring.
Automated grading & live stats — submissions are scored via Feign against stored answers, with pass/fail and average/high/low percentages aggregated on demand for curators.
Event-driven notifications via RabbitMQ — quiz-taken, quiz-submitted, and stat-sync events publish to a topic exchange instead of blocking on synchronous calls, so a slow email send never delays the participant's response.
On-demand reporting — HTML report-card emails and printable/PDF certificate documents generated server-side.

Frontend Backend Visit My Website

Product Management — Hexagonal Architecture

Spring Boot Hexagonal OAuth2 Redis RBAC Kafka

Multi-User Authentication & Authorization: Built a secure multi-user authentication system supporting email/password login, JWT-based authentication, refresh tokens, and multiple user types with different access levels.
OAuth2 Social Authentication: Integrated Google and GitHub OAuth2 login, automatically provisioning users when required and issuing application-specific JWT tokens after successful authentication.
Phone & OTP Authentication: Implemented phone-based authentication using Twilio SMS, with short-lived 6-digit OTPs, expiry validation, and secure verification before issuing authentication tokens.
Email Verification & Account Security: Added email verification and OTP-based workflows using Redis-backed temporary tokens, configurable expiration periods, and validation mechanisms to prevent unauthorized account activation.
Secure Password Reset: Implemented an email-based password recovery system using short-lived reset tokens stored in Redis, with token invalidation after successful password changes and secure password hashing before persistence.
Product Management with Redis Caching: Developed product management functionality using Redis with a cache-aside strategy, reducing repeated database queries and significantly improving response times.
Cache Invalidation Strategy: Designed targeted Redis cache invalidation for product, category, and user-specific data so database updates remain synchronized with cached data.
Order Management & Event-Driven Processing: Implemented an order lifecycle covering creation, status updates, and cancellation, publishing Kafka events to asynchronously trigger downstream operations.
Cloud-Based Profile & File Management: Integrated Cloudinary for secure image upload, storage, CDN-based retrieval, and deletion, persisting resource URLs with user profiles.
Role-Based Access Control (RBAC): Implemented fine-grained authorization using Spring Security and @PreAuthorize, enforcing hierarchical permissions across SUPER_ADMIN, ADMIN, and user roles.
Admin Provisioning & User Lifecycle Management: Developed administrative functionality allowing privileged users to provision admins, assign roles, and manage account activation status.
Centralized Exception Handling & API Reliability: Implemented a global @ControllerAdvice layer translating validation, authorization, authentication, and server errors into appropriate HTTP responses.
Production-Ready Observability: Added structured logging plus Spring Boot Actuator health checks for database, Redis, and Kafka dependencies to support deployment monitoring.
Enterprise-Oriented Security & Deployment: Configured CORS, RSA/RS256 JWT signing, token refresh mechanisms, externalized secrets, and production deployment via Docker, CI/CD, and AWS.

Frontend Backend Visit My Website

Product Management — Microservices

Spring Boot Gateway (WebFlux) Kafka Resilience4j Twilio Cloudinary

Source-of-truth auth-service with a three-way fan-out on registration — a fire-and-forget Kafka event, a synchronous Feign sync, and an async retrying Feign sync — mirroring the user across three databases.
Auto-login on signup — a JWT + refresh token pair is issued in the same response as registration, no separate login round-trip required.
Flexible login — username, email, or phone number, plus Google/GitHub OAuth2, all converging on the same user-sync pipeline; a best-effort SMS login alert fires when a phone number is on file.
Gateway-level JWT choke point — a filter validates every protected request before it's forwarded downstream, with public auth/OAuth routes explicitly whitelisted.
Cached, paginated product catalog — Caffeine-backed read endpoints with server-side sorting restricted to a safe field whitelist to prevent sort-param injection.
Resilient cross-service checkout — order placement validates live stock behind a circuit breaker + retry, rejecting the order up front if anything's missing or understocked; stock decrement afterward is best-effort and never rolls back a confirmed order.
Kafka-backed order stats — an idempotent, in-memory order-count cache is fed by consumed events, falling back to a synchronous cross-service scan only when the cache is cold.
Cloudinary-backed media — product images and profile pictures are uploaded/replaced via Cloudinary, fanned out across services the same way user data is synced.

Frontend Backend Visit My Website

ExploreEase Travel Agency

JSP + JDBC JWT Bootstrap Cloudinary

Full-stack application using JSP server-side rendering with a custom MVC-style structure and raw JDBC + PreparedStatements.
Manual JWT authentication with session integration; RBAC admin dashboard and booking workflows.
Responsive UI with HTML, CSS, Bootstrap, and TypeScript-based interactions including reusable layout components.
Integrated Cloudinary, Apache Commons FileUpload, and JavaMailSender for media handling and email notifications.

Code

Experience

Software Development Intern

Société Générale Global Solution Center

Jun 2023

Contributed to backend and frontend feature development with emphasis on code quality, debugging, and unit testing.
Designed and executed JUnit test cases to validate system reliability.
Participated in Agile sprints, code reviews, and QA cycles while optimising application modules.
Achieved 82% evaluation score.

Trainee — Java & Spring Boot

Société Générale Global Solution Center

Jul 2024

Completed training in Java, Spring Boot, MVC architecture, Angular, and Git.
Reduced system downtime by 30 minutes through test optimisation.
Managed Docker environment configurations and improved deployment workflows and documentation.

Education

B.E. — Electrical Communication Engineering

KLE Technological University (B.V.B College)

2023 · CGPA: 7.92

Higher Secondary (12th)

St. Francis College, Lucknow

2019

High School (10th)

St. Francis College, Lucknow

2017

About Me

My Projects

Quiz Application

Product Management — Hexagonal Architecture

Product Management — Microservices

ExploreEase Travel Agency

Experience

Education

Contact Me