REST API Security Debugger

Project Overview

Built a Postman-style workspace for constructing, proxying, and auditing API requests. The request builder covers HTTP, GraphQL, and WebSocket with headers, params, auth helpers, bodies, and cURL copy. Environments support {{variable}} interpolation with secret masking. Collections can be imported from Postman, OpenAPI, or cURL and exported as Postman v2.1, then shared via link or invite. Pre-request and test scripts run a Postman-like pm API inside a Web Worker sandbox. An OWASP-oriented security audit engine scores findings with evidence and copyable remediations. Visual flows chain request → assert → condition → delay, and Vercel Cron automations trigger those flows on a schedule. Auth0 sign-in syncs collections, history, and environments across devices. Outbound HTTP/GraphQL goes through a server-side /api/proxy with SSRF host blocking; WebSocket debugging connects from the browser.

This project showcases modern web development practices, clean architecture, and user-centered design principles. It demonstrates the ability to work with complex requirements and deliver solutions that balance functionality, performance, and user experience.

Technologies Used