Perancangan Dan Penerapan Arsitektur Back-end Modular Monolith Berbasis REST API Pada Sistem Reservasi Fasilitas Olahraga

Putradhana, Athaya Coulava (2026) Perancangan Dan Penerapan Arsitektur Back-end Modular Monolith Berbasis REST API Pada Sistem Reservasi Fasilitas Olahraga. Other thesis, Institut Teknologi Sepuluh Nopember.

Text 5025221287-Undergraduate_Thesis.pdf - Accepted Version Restricted to Repository staff only Download (5MB) | Request a copy

Abstract

Sistem reservasi fasilitas olahraga di lingkungan perguruan tinggi berperan penting dalam pengelolaan fasilitas kampus secara transparan dan efisien. Pada salah satu perguruan tinggi negeri, website reservasi fasilitas olahraga berfungsi sebagai sarana pemesanan bagi sivitas akademika dan masyarakat umum. Namun, sistem back-end sebelumnya belum memenuhi standar arsitektur pengembangan yang ditetapkan oleh unit teknologi informasi institusi, belum terintegrasi dengan Single Sign-On (SSO) institusi, serta rentan terhadap isu konkurensi (pemesanan ganda) dan kerentanan keamanan. Penelitian ini bertujuan untuk melakukan rekayasa ulang back-end sistem reservasi tersebut menggunakan arsitektur Modular Monolith berbasis REST API dengan framework Laravel 12 dan PostgreSQL. Penggunaan arsitektur Modular Monolith ditujukan untuk menyederhanakan pemeliharaan dan meningkatkan modularitas kode program tanpa menambah kompleksitas overhead jaringan komunikasi antarlayanan seperti pada arsitektur microservices.

Metode rekayasa ulang dilakukan melalui tahapan analisis kebutuhan, perancangan arsitektur dengan membagi sistem ke dalam modul domain `Auth` dan `Fasilitas`, implementasi kode, kontainerisasi dengan Docker, serta pengujian sistem secara komprehensif. Pengujian keamanan menggunakan Burp Suite membuktikan back-end kebal dari kerentanan Insecure Direct Object Reference (IDOR) melalui penggunaan kode pemesanan alfanumerik unik acak sepanjang 8 karakter, serta kebal terhadap serangan SQL Injection melalui filter validasi format input sisi server. Pengujian performa dengan Apache JMeter yang mensimulasikan beban konkuren hingga 1000 virtual users menunjukkan bahwa penerapan Pessimistic Locking database sukses memitigasi bentrokan pemesanan ganda (double booking) dengan menolak permintaan duplikat secara aman dengan mengembalikan status `422 Unprocessable Entity`. Kenaikan waktu respons rata-rata mencapai 37,9 detik pada beban puncak 1000 users dianalisis sebagai efek antrean karena menggunakan single-thread pada server lokal pengembangan dan bukan karena latensi database, membuktikan kestabilan logika back-end yang dirancang.
======================================================================================================================================
Sports facility reservation systems play an important role in ensuring transparent and efficient management of campus facilities in higher education institutions. At one public university, a web-based sports facility reservation system is used to facilitate booking services for academic members and the general public. However, the existing back-end system did not comply with the software architecture standards established by the institution's information technology unit, lacked integration with the institutional Single Sign-On (SSO) service, and was vulnerable to concurrency issues (double booking) and security threats. This study aims to re-engineer the reservation system back-end by implementing a REST API-based Modular Monolith architecture using the Laravel 12 framework and PostgreSQL. The Modular Monolith architecture was selected to improve code modularity and maintainability while avoiding the network communication overhead commonly associated with microservices architecture.

The software re-engineering process consisted of requirements analysis, architectural design by dividing the system into the Auth and Facility domain modules, implementation, Docker-based containerization, and comprehensive system testing. Security testing using Burp Suite demonstrated that the back-end was resistant to Insecure Direct Object Reference (IDOR) attacks through the use of randomly generated 8-character alphanumeric reservation codes and protected against SQL Injection attacks through server-side input validation. Performance evaluation using Apache JMeter with workloads of up to 1,000 concurrent virtual users showed that the implementation of database Pessimistic Locking successfully prevented double booking by safely rejecting duplicate requests with HTTP 422 Unprocessable Entity responses. The increase in average response time to 37.9 seconds under the peak workload of 1,000 users was attributed to request queuing caused by the single-threaded local development server rather than database latency, demonstrating the stability of the proposed back-end architecture.

Item Type:	Thesis (Other)
Uncontrolled Keywords:	Back-end, Modular Monolith, REST API, Laravel, SSO, Software Re-engineering, Back-end, Modular Monolith, REST API, Laravel, SSO, Software Re-engineering.
Subjects:	Q Science > QA Mathematics > QA76.758 Software engineering
Divisions:	Faculty of Intelligent Electrical and Informatics Technology (ELECTICS) > Informatics Engineering > 55201-(S1) Undergraduate Thesis
Depositing User:	Athaya Coulava Putradhana
Date Deposited:	25 Jul 2026 08:07
Last Modified:	25 Jul 2026 08:07
URI:	http://repository.its.ac.id/id/eprint/137826

Actions (login required)

View Item