ONER
A paid course platform for Central Asia, getting ready to launch. I built the backend: payments, course access and video protection.
- Stopped double charges and free access. Every payment webhook is checked for signature, amount and duplicates before a course opens.
- Kept paid lessons locked. Every request is checked on the server (JWT login plus an ownership check), so the browser can never unlock a course by itself.
- Made paid videos hard to share. Kinescope DRM gives short-lived playback tokens to course owners only.
- Let the team run the platform without touching the database, with a CRUD admin API for courses, file uploads to Cloudflare R2, users, purchases and refunds.