AUSS Member Platform

AUSS 2026 dev team · Auckland University Strength Society · 2026

The live membership, events and check-in platform for the Auckland University Strength Society, built by a student dev team.

AUSS website home page: navigation (Home, About, Sponsorship, Social, Activities, Join AUSS) over a dimmed training photo, with the heading “A Community of Strength Athletes” and Join AUSS and Learn More buttons.

Problem

AUSS needed one place for members to join and pay, for execs to run events and check people in, and for visitors to find out about the club and its sponsors.

My role

Took features from solutioning tickets through to release, across visitor pages, admin tools, payments and security.
Migrated the frontend to TypeScript (TSX) and Tailwind CSS v4, with a config refactor.
Built RSVP and event attendee management.
Delivered a security hardening pass: URL validation against SSRF, open redirects and javascript: URIs; centralised Zod input validation; trust-proxy and HTTPS enforcement; student ID privacy; per-route auth assertion tests.
Built the cash and bank-transfer membership flow: proof-of-payment upload, then admin review and approval of membership status.
Let non-UoA members register without a Student ID, and fixed the signup consent flow alongside published Terms of Service and Privacy Policy.

Challenges

Making sure user-supplied links stored by admins can't be used for server-side request forgery, open redirects or script injection.
Mitigating plaintext storage of student IDs and confirming compliance with University data policy.
Agreeing Terms of Service, Privacy Policy content and data retention with the club before publishing them.
Supporting manual cash and bank-transfer payments alongside online payments, with an admin approval step before membership activates.

Results

Owned 38 Jira issues: 17 user stories released or ready for release, 20 solutioning and development tickets done, and a P1 registration bug fixed.
Merged 6 pull requests into the team repository.

My role

Took features from solutioning tickets through to release, across visitor pages, admin tools, payments and security.

Migrated the frontend to TypeScript (TSX) and Tailwind CSS v4, with a config refactor.

Built RSVP and event attendee management.

Delivered a security hardening pass: URL validation against SSRF, open redirects and javascript: URIs; centralised Zod input validation; trust-proxy and HTTPS enforcement; student ID privacy; per-route auth assertion tests.

Built the cash and bank-transfer membership flow: proof-of-payment upload, then admin review and approval of membership status.

Let non-UoA members register without a Student ID, and fixed the signup consent flow alongside published Terms of Service and Privacy Policy.

Challenges

Making sure user-supplied links stored by admins can't be used for server-side request forgery, open redirects or script injection.

Mitigating plaintext storage of student IDs and confirming compliance with University data policy.

Agreeing Terms of Service, Privacy Policy content and data retention with the club before publishing them.

Supporting manual cash and bank-transfer payments alongside online payments, with an admin approval step before membership activates.