- Role
- Backend Developer
- Year
- 2025

About this project
A Laravel 12 reporting web application and RESTful API provider designed to manage security vulnerability reports (Bug Bounty) and municipal statistical data requests. Features standardized OpenAPI 3.0 / Swagger documentation to facilitate secure, decoupled service consumption across platforms.
SIPANDIK addresses fragmented reporting channels among citizens, verification administrators, and regional government agencies (OPD). The backend architecture enforces strict domain integrity, granular Role-Based Access Control (RBAC), and structured data ingestion for security disclosures categorized under the OWASP Top 10 standard.
As the Backend Developer and API Engineer, core deliverables included designing the relational database schemas (MySQL/PostgreSQL), implementing token-based API authentication via Laravel Sanctum alongside Laravel Breeze, and authoring RESTful API endpoints across authentication and bug reporting modules with full OpenAPI 3.0 / Swagger documentation. Additional backend responsibilities involved configuring asynchronous queue workers for transaction-driven email notifications, automating digital certificate generation via DomPDF with embedded dynamic QR verification codes, and engineering data export jobs for Excel workbooks and archival PDF reports.
Disclaimer: This project was developed independently as a portfolio case study and technical demonstration. It is not an officially commissioned or production system of the referenced government institution.
Key features
- RESTful API architecture documented interactively with Swagger / OpenAPI 3.0 specifications Token-based API authentication via Laravel Sanctum securing public and protected routes Role-Based Access Control (RBAC) across Admin, Regional Agency (OPD), and Citizen accountsVulnerability disclosure module aligned with OWASP Top 10 classifications Municipal statistical data request submission and disposition workflowMulti-stage status lifecycle tracking (Submitted, Verified, In Progress, Resolved)Automated digital PDF certificate generator with verifiable QR code validationAsynchronous queue processing for reliable email triggers and in-app admin alertsMulti-format analytic data export supporting Excel workbooks and print-ready PDF files
Tech stack
SIPANDIK - Cybersecurity & Statistical Reporting System is built with Laravel 12, PHP 8.3, RESTful API, Swagger / OpenAPI 3.0, MySQL, PostgreSQL, Laravel Breeze, Laravel Sanctum, DomPDF, Maatwebsite Excel, TailwindCSS, Alpine.js.