Secure Spring Boot Mobile Backend (Full Stack)
Budget: ₹400 – ₹750 INR
I’m building a new mobile application and I need a robust Java Spring Boot backend to power it. The core services you’ll create must cover:
• User authentication and management with full multi-factor authentication (MFA) and support for future multi-party authentication flows.
• A streamlined customer-onboarding journey that begins with registration and ends with a verified, fully profiled user record.
• Reliable data storage and retrieval using a relational engine—MySQL or PostgreSQL, whichever you are most comfortable optimising.
RESTful APIs should be documented with Swagger/OpenAPI, secured with JWT or a similarly strong token strategy, and thoroughly unit- and integration-tested. I’ll provide the mobile team’s contract-first API specs; you’ll wire them up, create the database schema, and deliver clear migration scripts.
Acceptance criteria
1. Endpoints for sign-up, MFA login, password reset, profile update and session management return the exact request/response shapes supplied.
2. Onboarding flow persists all user milestones and is replayable for audit.
3. SQL scripts run cleanly on both MySQL 8 and PostgreSQL 15.
4. Postman or similar collection demonstrates every endpoint, including negative cases.
5. Code passes all tests via Maven and spins up with Docker-Compose in one command.
If you’re experienced with Spring Security, JPA/Hibernate and containerised deployment, this should feel straightforward. Let’s discuss any questions you have around edge-cases or timelines so we can get started right away.
• User authentication and management with full multi-factor authentication (MFA) and support for future multi-party authentication flows.
• A streamlined customer-onboarding journey that begins with registration and ends with a verified, fully profiled user record.
• Reliable data storage and retrieval using a relational engine—MySQL or PostgreSQL, whichever you are most comfortable optimising.
RESTful APIs should be documented with Swagger/OpenAPI, secured with JWT or a similarly strong token strategy, and thoroughly unit- and integration-tested. I’ll provide the mobile team’s contract-first API specs; you’ll wire them up, create the database schema, and deliver clear migration scripts.
Acceptance criteria
1. Endpoints for sign-up, MFA login, password reset, profile update and session management return the exact request/response shapes supplied.
2. Onboarding flow persists all user milestones and is replayable for audit.
3. SQL scripts run cleanly on both MySQL 8 and PostgreSQL 15.
4. Postman or similar collection demonstrates every endpoint, including negative cases.
5. Code passes all tests via Maven and spins up with Docker-Compose in one command.
If you’re experienced with Spring Security, JPA/Hibernate and containerised deployment, this should feel straightforward. Let’s discuss any questions you have around edge-cases or timelines so we can get started right away.