← All case files
004Case file / Org2026

Labs on Nexus

Red and Blue team rooms for GDG PUP Study Jams

Shipped
Role
Lead Developer
Team
Org
Year
2026
Status
Shipped
Exhibit A
Screenshot of Labs on Nexus

01 Problem

Study Jam slides weren’t enough. Members needed somewhere safe to actually practise between sessions.

02 What I built

The whole stack on Vercel serverless: the eight rooms, the NEXUS{TOKEN_TEAMID} flag system, atomic XP and the leaderboard. There’s also a rate-limited Gemini support bot with an FAQ fallback, plus an in-memory fallback for when the database is unreachable.

03 Security notes

Flags are stored only as SHA-256 hashes and compared with timingSafeEqual. Sessions are regenerated on login, and every change passes Vitest in CI.

04 Impact

Turned the cybersecurity Study Jams from lectures into practice. Members could work through Red and Blue rooms at their own pace between sessions and see their team climb the board.

05 What I took from it

People learn security by doing it, not by watching someone else do it on a slide.

Next file — Case 005ClassmosOpen →