DGTOOHL Social – Multi-Platform Publishing Console

Delivered scope

• Supports unified publishing and scheduling to Instagram, YouTube, X, and LinkedIn.
• Features OAuth 2.0 automated token refresh, TOTP two-factor authentication, and encrypted credential storage.
• Runs background workers for queue dispatch, media validation, error logging, and MariaDB snapshot backups.

Technology

System approach

• App Core: Next.js 16 App Router with React 19, Tailwind CSS, and protected superadmin management views.
• OAuth & APIs: Multi-provider OAuth 2.0 integration for Instagram Graph API, YouTube Data API, X API v2, and LinkedIn Marketing API.
• Background Worker: TSX background scheduler managing post queues, retry backoffs, and status webhooks.
• Security: TOTP-based multi-factor authentication (otplib/qrcode), AES encryption for API tokens, and Jose JWT sessions.

Challenges

• Handling diverging rate limits, media format requirements, and token expiration cycles across four distinct social platforms.
• Securing high-privilege brand access against credential leaks and unauthorized post dispatching.
• Ensuring scheduled posts execute reliably without duplicate dispatches or missed publication windows.

Solutions

• Standardized media preprocessing pipelines for image and video formats tailored to each platform's API constraints.
• Implemented zero-trust security with mandatory TOTP MFA, bcrypt password hashing, and encrypted database token storage.
• Built an isolated background queue worker with atomic status updates and database backup snapshots.

Key outcomes