Adham Mustafa

Software engineer. I build things end to end, from the database to the screen.

GitHubLinkedIn

Projects

Turaath Books

A bookstore built end to end.

Turaath Books Arabic books catalog, with subject, author and price filters, a grid of books, and new arrivals and best sellers in the sidebar.
  • Next.js 16
  • TypeScript
  • Tailwind CSS
  • Supabase
  • Stripe
  • Resend

An e-commerce site for an Islamic bookstore, with a filterable catalog of 395+ Arabic and English books and an admin dashboard for managing books and orders.

  • Two ways to pay: Stripe checkout with Apple Pay and Google Pay, or a manual Zelle flow for customers who prefer a bank transfer.
  • Stripe webhooks confirm payments and update order status, and customers get confirmation emails.
  • Role-based admin and customer accounts, secured with Row-Level Security on every table.
Live site

Dawam

A task and habit tracker.

Dawam task view, with tasks grouped into General and Tech sections, an empty Tasks section, and a button to add a new section.
  • Next.js 16
  • React 19
  • TypeScript
  • Spring Boot
  • PostgreSQL
  • Supabase
  • Docker

A full-stack tracker for daily tasks and recurring habits, with a 13-endpoint Spring Boot API behind a Next.js frontend.

  • A calendar view with month and week navigation that highlights overdue tasks.
  • Drag-and-drop reordering within a section and across sections.
  • One login across two separately deployed services: the API validates Supabase tokens, and the backend runs in a container on Render.
Live siteGitHub

Rise and Shine HR Platform case study

A secure internal HR system, designed for 100+ employees.

  • Next.js
  • TypeScript
  • Prisma
  • Zod
  • Supabase Postgres
  • Resend

I built the backend API for an HR platform that replaces spreadsheets and email for onboarding and compliance at an ABA therapy organization. It handles sensitive data like SSNs and pay rates, so security shaped the whole design.

  • Two layers of access control: role-based checks in the API, backed by Postgres Row-Level Security.
  • Field-level encryption: AES-256-GCM on 5 sensitive fields.
  • Tamper-evident audit log: 30 event types, each entry linked to the last with a SHA-256 hash so edits can’t go unnoticed.

Built on test data, not live employee records.

Luqmah in progress

Ingredient checking for Muslim shoppers.

Scan a barcode, and the app flags ambiguous ingredients like gelatin and enzymes, then emails the manufacturer to ask whether they’re animal-derived. I’m building it with friends.

Experience

Software Engineer Intern

Rise and Shine ABA
Jun to Aug 2026

Built the backend for an internal HR platform: API routes, role-based access, field-level encryption, and audit logging.

Computer Science Intern

Runwei
Mar to May 2026

Scored 3 AI search visibility platforms against 8 criteria, mapped the grant recommendation pipeline, and proposed a hybrid retrieval approach for better match reasons.

About

I’m a Computer Science student at Queens College in New York City. I like building whole systems, from the database and API to the screen, and I care about getting the security details right. Outside of coursework I run the budget for Queens College’s Muslim Student Association.