Private task management / 2026
Taskflow
A secure personal task manager with authentication, full CRUD workflows, and completion tracking.
OVERVIEW
Taskflow gives every account a private workspace for creating, editing, completing, and deleting tasks. The React and TypeScript interface is backed by a Node.js, Express, and MongoDB API with JWT-based sessions.
The challenge
Deploying the frontend and backend from a monorepo introduced cross-origin cookie issues: the browser treated the two services as separate security boundaries, so authenticated requests were unreliable.
The solution
I revised the cookie and CORS configuration and introduced a reverse-proxy rewrite so the browser could interact with both halves of the application through one origin. This preserved secure authentication without compromising the user flow.
What shipped
- Private user workspaces
- JWT authentication
- Create, edit, complete, and delete tasks
- Reverse-proxy deployment architecture
OUTCOME
A deployed full-stack app with private per-user data and a reliable authentication boundary—plus a clearer understanding of how browser, proxy, and server security concerns intersect.