You will get a Spring Boot REST API, secure and documented

Younes B.Status: Offline
Younes B.

Let a pro handle the details

Buy Web Application Programming services from Younes, priced and ready to go.
Younes B.Status: Offline
Younes B.

Let a pro handle the details

Buy Web Application Programming services from Younes, priced and ready to go.

Project details

You'll get a working Spring Boot REST API - not just endpoints that respond, but one built the way I'd want it handed to me: layered architecture, validated inputs, proper error responses, and JWT auth if you need it. I split my time between building backend systems and finding security holes in other people's APIs as a bug bounty hunter, so I write endpoints assuming someone will try to break them. You'll get clean code, a Postman collection or Swagger docs, and a short walkthrough of how it's structured so your next developer isn't guessing.
Programming Languages
JavaScript, Java
Coding Expertise
Performance Optimization, Security

What's included $150

These options are included with the project scope.

$150
  • Delivery Time 5 days
  • Number of Revisions 2
    • Source Code
Younes B.Status: Offline

About Younes

Younes B.Status: Offline
Spring Boot Backend Engineer | Secure APIs, OAuth2/Keycloak, Fintech
Casablanca, Morocco - 9:49 am local time
I build and secure Spring Boot backends for fintech and SaaS teams — OAuth2/Keycloak auth, payment flows, and APIs that survive a real pentest. Day job: secure banking microservices at a Moroccan bank. Nights: bug bounty hunter on HackerOne and Bugcrowd.

Most Spring Boot APIs I'm called in to look at fail on the same handful of things: refresh-token rotation misconfigured in Keycloak, IDOR on resource endpoints because authorization is checked at the controller instead of the data layer, JWT validation that trusts the alg header, and multi-tenant queries missing a tenant filter. I find these for a living on both sides — I write the code and I break it.

What I do:
- Spring Boot 3 / Java 21 REST APIs — clean domain modelling, virtual threads where they earn it
- Spring Security: OAuth2, JWT, Keycloak realms, RBAC, multi-tenant isolation
- Security review of an existing Spring codebase — OWASP API Top 10, written report with reproduction steps and patches
- Angular / Next.js front ends when you need one hand on the whole stack

Background: Senior engineer in a bank's digital factory, working on payment and fraud-adjacent microservices. Independent security researcher. Java/Spring core with Docker, Kubernetes, and CI/CD.

Send me your repo or your problem and I'll tell you straight whether I'm the right fit before you spend a dirham.

Steps for completing your project

After purchasing the project, send requirements so Younes can start the project.

Delivery time starts when Younes receives requirements from you.

Younes works on your project following the steps below.

Revisions may occur after the delivery date.

Design & build the API

Model the entities, set up the Spring Boot project, and build out the endpoints with validation and auth.

Review the work, release payment, and leave feedback to Younes.