WorkHub
Multi-tenant project-management API where tenants never see each other’s data.
| K8s replicas with probes | 2 |
| cross-tenant test matrix | 401/403/404 |
In SaaS, a single missed tenant check leaks one customer’s data to another. WorkHub enforces tenant and role boundaries at every layer and proves it with tests.
What I worked on
- JWT-based RBAC passed through a request-scoped filter into guards in the service layer.
- A cross-tenant isolation suite asserting 401, 403, and 404 responses across endpoints.
- A Testcontainers test showing that a failed tenant onboarding rolls back atomically.
- A TENANT_ADMIN-only endpoint for inviting users.
- The Kubernetes layer: ConfigMap and Secret separation, a 2-replica Deployment with Actuator readiness and liveness probes plus resource limits, and in-cluster PostgreSQL and RabbitMQ.
Built with
Java 17, Spring Boot, PostgreSQL, RabbitMQ, Docker, Kubernetes, Testcontainers.