Scaling Secure Access Across the Ministry
Migrating every internal product to a unified OAuth 2.0 + JWT gateway without interrupting daily work.
When I joined the Ministry of Interior in late 2022, every product team owned its own login flow. By August 2023 we had collapsed those one-off solutions into a single OAuth 2.0 and JWT gateway that now issues millions of tokens each month. The project blended lightweight Node.js services, Spring Boot integrations, and a shared TypeScript client that front-end teams can drop in without ceremony.
Rolling out the gateway meant pairing with each squad, rehearsing cutovers, and building dashboards that surface token health in real time. Today security reviews focus on policy instead of plumbing, and new applications ship faster because authentication is already solved.