~/back-to-portfolio
~/projects/diuja-desk/Full-Stack / PlatformCompleted

DIUJA Desk – Digital Newsroom & Member Management System

High-performance digital newsroom & member portal with zero-trust RBAC, bidi i18n, and sub-150ms PostgreSQL queries.

DIUJA Desk – Digital Newsroom & Member Management System screenshot 1
Screen 01 / 01

DIUJA Desk — Enterprise Journalist Association Portal & Digital Newsroom

#Executive Overview

The Dhaka International University Journalist Association (DIUJA) required a centralized, production-ready digital platform to replace fragmented, manual administration (spreadsheets and paper records). The platform needed to automate membership intake, streamline editorial publishing, archive historical executive committee records, and provide bulletproof administrative governance with bilingual support (English and Bengali).

System Diagram

#Architectural Highlights & Engineering Decisions

##1. Relational Modeling & Query Performance

Designed a normalized 12-table PostgreSQL schema within Supabase. Eliminated N+1 database bottlenecks across multi-term committee rosters by replacing iterative PostgREST queries with single-roundtrip relational joins (profiles embedded into committee_members) supported by compound indexes (term_id, display_order), reducing P50 read latency to under 120ms.

##2. Defense-in-Depth Security Surface

  • Edge CSRF & Origin Validation: Integrated an edge proxy barrier (proxy.ts) that verifies origin and referer headers against an allowlist prior to executing any mutation or Server Action.
  • Elevated Re-Authentication Gates: Enforced a cryptographic 5-minute TTL challenge (requireFreshAuth) to guard destructive operations such as role changes and member deletions.
  • Distributed Rate Limiting & Bot Defense: Deployed Upstash Redis rate limiters across sensitive endpoints (login, uploads, registration) alongside invisible form honeypots.

NOTE

Zero-Trust Administrative Model: Client-side state is never trusted for authorization. Every mutation is validated against PostgreSQL is_super_admin() functions executed at the Row-Level Security (RLS) layer.

TIP

Dynamic Asset Pipeline & Responsive Media: Integrated Cloudinary transformations (f_auto,q_auto) with server-side magic-byte validation, cutting image payloads by over 60% while protecting against MIME-type spoofing.

#Measurable Technical & Operational Impact

  • End-to-End Automation: Converted a manual onboarding process into a self-service pipeline with idempotent transaction verification and automated admin notification workflows.
  • Enterprise Observability: Integrated structured JSON logging, health and readiness probes (/api/healthz, /api/readyz), audit trail persistence, and opt-in Sentry telemetry.
  • Audit-Grade Reliability: Successfully passed 9 exhaustive production readiness audit rounds covering Strict-Transport-Security (HSTS), Content Security Policy (CSP), and automated sitemap/metadata SEO generation.