
Built a robust authentication system that integrates Google OAuth 2.0 with Time-Based One-Time Password (TOTP) verification for enhanced account security. The system includes AES-128 encryption for JSON Web Tokens (JWT), providing secure session management and tamper-proof user data. To ensure resilience against common attack vectors, the system was stress-tested against brute-force, dictionary, and MITM scenarios. With built-in rate limiting and session validation, the implementation ensures only verified users can access protected resources, setting a strong foundation for secure user authentication in modern web applications.