José Romaniello
Head Of Engineering at Auth0
Cordoba, Córdoba, Argentina
Summary
🤩
Rockstar🎓
Top SchoolJosé Romaniello is a seasoned Head of Engineering with 17 years building and operating scalable backend systems from Córdoba, Argentina. He blends system architecture and design-pattern expertise with hands-on backend development and configuration management, currently ensuring uptime and scalability at Auth0. A longtime open-source contributor, José has improved critical JWT and Auth0 libraries—adding security fixes, multi-key handling, and richer token validation—demonstrating deep familiarity with authentication flows and middleware. He also contributes front-end improvements (React/CAPTCHA UI and developer sites), showing full-stack sensibility beyond his backend focus. Colleagues rely on him to turn complex auth, deployment and reliability challenges into maintainable solutions informed by Unix philosophy. Notably, his work spans both high-level system design and low-level bug fixes, a rare combination that accelerates shipping robust, secure services.
16 years of coding experience
9 years of employment as a software developer
Universidad Tecnológica Nacional
Spanish, English
Stackoverflow
13,996reputation
769kreached
76answers
7questions
npm
top-5%
jquery
top-5%
oauth
top-5%
babeljs
top-5%
security
top-1%
castle-windsor
top-5%
Github Skills (58)
api-rest10
javascript10
middleware10
expressjs10
website-development10
apidoc10
api-design10
restful-api10
testing10
openid-connect10
css10
net10
authentication10
user-authentication10
dotnet10
Programming languages (20)
Github contributions (5)
auth0/express-jwt
Apr 2014 - Jan 2023
connect/express middleware that validates a JsonWebToken (JWT) and set the req.user with the attributes
Role in this project:
Back-end Developer
Back-end DeveloperContributions:3 reviews, 166 commits, 67 PRs in 8 years 10 months
Contributions summary:José primarily contributed to the development and maintenance of the `express-jwt` middleware. Their commits include implementing new features like the "unless" middleware and the ability to handle multiple secret keys. They also addressed issues related to authorization header handling and token validation, including fixes for signature verification and handling expired tokens. Furthermore, the user made improvements to the testing framework.
jsonwebtokenexpressjsreqexpressnodejs
auth0/jwt-decode
Feb 2014 - Feb 2018
Decode JWT tokens; useful for browser applications.
Role in this project:Front-end Developer
Front-end DeveloperContributions:56 commits, 20 PRs, 32 pushes in 4 years
Contributions summary:José added support for decoding UTF-8 and binary tokens, expanding the functionality of the `jwt-decode` library to handle a broader range of token formats. They implemented tests to validate the correct decoding of these new token types, ensuring the library functions as expected with these inputs. Additionally, the user updated the test harness, improving the testing infrastructure.
tokensbrowserjwt-tokensdx-sdkdecode
Find and Hire Top DevelopersWe’ve analyzed the programming source code of over 60 million software developers on GitHub and scored them by 50,000 skills. Sign-up on Prog,AI to search for software developers.