Skip to main content

Amr Samir

Amr Samir

Amr Samir

Full-Stack Software Engineer

Building high-performance full-stack web applications, scalable architectures, and clean systems with Next.js & Node.js.

github linkedin Email

Quick Links

Home Projects Blog Skills Tech Opportunities Testimonials

Clusters

About Experience Certification Resume / CV Contact

Technical

System Architecture Security & Hardening RSS Feed LLMs Context

© 2026 Amr Samir. All rights reserved.

Next.js & React•TypeScript•Tailwind CSS

Amr Samir | Backend Development using ASP.NET Core

Certificate for Backend Development using ASP.NET Core

Board Infinity

Board Infinity

Backend Development using ASP.NET Core

professional-certificationCoursera

Issued: January 2025

Description

Building scalable backend applications using ASP.NET Core, MVC architecture, Web APIs, and relational databases.

Skills Acquired

Credential

ID:6581557D2KRR

Verify Credential

Backend Development using ASP.NET Core

Where I applied this knowledge

Projects

YallaBaytak - Multi-Role Real Estate Operating Platform

YallaBaytak - Multi-Role Real Estate Operating Platform

Real estate operating system featuring multi-role workflows, WhatsApp alerts, and geospatial mapping in Cairo & Giza.

Book & Go Portal - Travel Agency Operations & Invoicing Engine

Book & Go Portal - Travel Agency Operations & Invoicing Engine

An operational travel agency management engine engineered with NestJS and Prisma for booking workflows, multi-currency customer invoicing, dynamic itinerary building, and passenger manifests.

Yllah — Private Travel Club & Concierge Booking Platform

Yllah — Private Travel Club & Concierge Booking Platform

A membership-based private travel club combining curated luxury hotel discovery, protected member pricing, structured booking requests, and a dedicated concierge-led travel operation.

Articles

JWT Authentication in Production: Access Tokens, Refresh Token Rotation & Revocation

JWT Authentication in Production: Access Tokens, Refresh Token Rotation & Revocation

Architecting secure stateless authentication: token structure, HTTP-only cookie storage against XSS/CSRF, automated rotation family tracking, and Redis blacklisting.

Designing Secure Password Reset & OTP Verification: Timing Attacks, Rate Limits & State

Designing Secure Password Reset & OTP Verification: Timing Attacks, Rate Limits & State

Architecting bulletproof password recovery: secure token hashing, timing attack mitigation with timingSafeEqual, OTP brute-force limits, and single-use invalidation.

CORS Deep Dive: Why the Browser Sends Preflight OPTIONS and How to Fix It

CORS Deep Dive: Why the Browser Sends Preflight OPTIONS and How to Fix It

Demystifying Cross-Origin Resource Sharing: Same-Origin Policy, simple vs preflighted requests, credentials mode, and secure server headers.