HEX-IAM — Open Source Multi-Tenant Identity & Access Management Platform
• Tech stack: Python, FastAPI, redis, OAUTH 2.0, postgresql, asyncpg, bcrypt, bloom filters • Designed production-grade, multi-tenant IAM platform providing secure authentication, authorization, and identity lifecycle management for SaaS applications • Implemented OAuth/OlDC-compliant authentication flows supporting PKCE, authorization codes, and refresh-token rotation • Built fine-grained authorization with RBAC, FGA, and ABAC-style policies, enforcing strict per-tenant isolation at application and database layers • Designed Redis-backed deterministic token revocation system using Bloom filters for 0(1) revocation checks with constant-time validation, avoiding per-request database calls or introspection endpoints while maintaining strong security guarantees where false positives result in forced re-authentication but never privilege escalation • Enforced strong tenant isolation using PostgreSQL Row-Level Security (RLS), enabling safe multi-tenant operation across shared infrastructure





