1 / 9
Featured project · 2025–2026
PlaylistLab.
An architecture exercise in the shape of a music app. Three layered OAuth flows (Firebase Google + Spotify + YouTube), tokens encrypted at rest with AES-256-CBC, a Firestore the client cannot touch — every read and write mediated by Cloud Functions.
What users see: a SaaS that generates personalised playlists from a free-text AI prompt and transfers them between Spotify and YouTube Music. Built solo, end‑to‑end. Deployed, publicly accessible, actively developing.
- Architecture
- Backend-mediated:
firestore.rulesis deny-all; every read/write goes through the Admin SDK in Cloud Functions. OAuth tokens AES-256 encrypted before storage, decrypted server-side only. - OAuth
- Three flows stacked: Firebase Google Sign-In (app identity) · Spotify (music data) · YouTube (cross-platform transfer). Callbacks route through dedicated paths (
/callback,/youtube-callback). - Stack
- React 19 + Vite (JS) on the frontend · TypeScript on Firebase Cloud Functions v2 (26 endpoints) · Firestore · Spotify, YouTube & Last.fm APIs · Groq · OAuth 2.0 · Lemon Squeezy
- Role
- Sole engineer · product, architecture, frontend, backend, deploy
- Status
- Deployed · publicly accessible · actively developing








