Currently, I'm an auth system backend enginner.Here are my achievements until now:- Designed and implemented a cross-site authentication and authorization API gateway framework for frontend and backend, accelerating SaaS product development.- Developed multiple login methods for diverse user agents.- Improved login paths, reducing login time by approximately 2 seconds.- Implemented canary releases for login and authorization services using Argo Rollouts and customized NGINX balancer in Lua to resolve sticky cookie issues.- Integrated regional SRP authentication API with global authentication services using Golang’s ReverseProxy.- Created an account proxy function for service billing management on behalf of other accounts.- Designed solutions to address replay attack false alarms due to user agent time skew.- Reduced login time by almost 3 seconds through login flow optimization and URL redirection reduction.- Designed and implemented web sessions with server-side sessions using Redis for session lookup; client-side sessions with short-lived JWT access tokens and rotating refresh tokens.- Designed a method to overcome Safari’s partitioning mechanism (from WebKit Intelligent Tracking Prevention) for synchronizing RSA credentials across domains.- Fixed race conditions and SQL database access performance in ORY/hydra by adding locks and indices (contributed to upstream issues #1721 and #1653).

In this period, I was working as an embedded Software Engineer.Here are my achievements during this stage:- Analyzed and improved DSM package Antivirus Essential's scanning performance by 5x using memory pools to fix memory fragmentation. Contributed to Cisco-Talos/clamav-devel (pull request #91).- Fixed large file detection bug in Antivirus Essential on 32-bit platforms by correcting data type casting (pull request #96).- Increased memory testing accuracy by merging patterns from multiple open-source tools, resulting in 100% detection of random defect memory modules.- Enhanced memory testing coverage by porting user-space tools to U-Boot for testing memory addresses used by the Linux kernel.- Reduced memory consumption by 50% in Threat Prevention (intrusion prevention system) by removing Barnyard2 and writing threat logs directly from the Suricata engine to the PostgreSQL database.