Skip to content
Sanjay Singh Bhandari
ShowcaseCase StudiesJourneyExpertiseLeadershipAI EngineeringEducation
ResumeContact

Explore

  • Engineering Showcase
  • Case Studies
  • Engineering Journey
  • Technical Expertise
  • Leadership
  • Architecture
  • AI Engineering

Credentials

  • Achievements
  • Education
  • Resume

Contact

  • Professional Hub
  • LinkedIn
  • LinkedIn
  • GitHub

© 2026 Sanjay Singh Bhandari.

Built with Next.js, TypeScript, and Tailwind CSS · v1.2.0

    1. Home/
    2. Case Studies/
    3. OAuth2 Authentication Platform
    ProductionOpal BPM India Pvt Ltd

    OAuth2 Authentication Platform

    A standardized OAuth2 authentication and authorization system rolled out across multiple client deployments of Opal's platform.

    Type
    Enterprise case study
    Client / company
    Opal BPM India Pvt Ltd
    Stack
    6 technologies

    On this page

    • Business Problem
    • My Role
    • Technology Stack
    • Architecture Summary
    • Technical Challenges
    • Engineering Decisions
    • Engineering Outcomes

    Business Problem

    Opal BPM's platform is deployed to multiple private-brand retail clients, each historically with its own approach to authentication and authorization. That fragmentation made security review, client onboarding, and access-control consistency harder as the client base grew.

    My Role

    I led the design and implementation of the OAuth2-based authentication and authorization system, and drove its standardization across the multiple client deployments — this was a leadership-and-build role, not implementation-only: it required getting buy-in for a common security model across otherwise independent client environments.

    Technology Stack

    JavaSpring BootSpring SecurityOAuth2JWTREST APIs

    Architecture Summary

    An OAuth2-based authorization layer sitting in front of Opal's Spring MVC / Spring Boot services, using Spring Security for enforcement, providing a single, consistent authentication and authorization model that every client deployment adopts instead of a bespoke per-client scheme.

    Technical Challenges

    Rolling out one authentication standard across multiple already-live client deployments without breaking existing integrations or access patterns during migration.

    Engineering Decisions

    Standardize on OAuth2 as the single authentication/authorization model across all client deployments.

    Why — A common, well-understood standard reduces the security review burden per client and lets the platform team reason about access control once instead of per-deployment.

    Engineering Outcomes

    • OAuth2-based authentication and authorization standardized across multiple client deployments of the platform.
    Previous

    Beckn Protocol Verification Adapter

    Next

    Enterprise Artwork Management Platform

    Related projects

    ProductionOpal BPM India Pvt Ltd

    Enterprise Artwork Management Platform

    Opal's core product lifecycle, regulatory compliance, and packaging artwork management platform for private-brand retailers — architected and built from the company's second employee onward.

    JavaSpring MVCSpring BootSpring SecurityMicroservices
    Read case study
    ProductionOpal BPM India Pvt Ltd

    Enterprise Exchange Platform

    A 16-microservice trading platform matching buyers and sellers across multi-tenant e-waste categories, run at 99.9% uptime.

    Java 21Spring Boot 3.4.13MicroservicesPostgreSQLKafka
    Read case study
    ← Back to all case studies