<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:dc="http://purl.org/dc/elements/1.1/">
  <channel>
    <title>DEV Community: Geeta</title>
    <description>The latest articles on DEV Community by Geeta (@sanctum).</description>
    <link>https://dev.to/sanctum</link>
    <image>
      <url>https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3698850%2F2dbbd29f-b002-4bd5-95f1-034302dec6a9.jpg</url>
      <title>DEV Community: Geeta</title>
      <link>https://dev.to/sanctum</link>
    </image>
    <atom:link rel="self" type="application/rss+xml" href="https://dev.to/feed/sanctum"/>
    <language>en</language>
    <item>
      <title>I built an auth backend for my own app — then tried selling it to see if it works</title>
      <dc:creator>Geeta</dc:creator>
      <pubDate>Wed, 07 Jan 2026 16:20:39 +0000</pubDate>
      <link>https://dev.to/sanctum/i-built-an-auth-backend-for-my-own-app-then-tried-selling-it-to-see-if-it-works-39ap</link>
      <guid>https://dev.to/sanctum/i-built-an-auth-backend-for-my-own-app-then-tried-selling-it-to-see-if-it-works-39ap</guid>
      <description>&lt;p&gt;When I started working on a new mobile app recently (Android), I knew one thing for sure:&lt;/p&gt;

&lt;p&gt;I didn’t want to rewrite authentication logic again.&lt;/p&gt;

&lt;p&gt;Auth is one of those things you must get right, but it’s also the part I enjoy the least:&lt;br&gt;
JWT setup, refresh tokens, expiry handling, logout, edge cases, and keeping libraries in sync.&lt;/p&gt;

&lt;p&gt;I’ve worked with backends in my job before, but this time was different.&lt;/p&gt;

&lt;p&gt;For this app, I decided to build the backend completely from scratch on my own — including auth — which I hadn’t owned end-to-end before. That alone made the project more interesting.&lt;/p&gt;

&lt;p&gt;Instead of rushing through auth just to move on, I slowed down and treated it like a reusable backend.&lt;/p&gt;

&lt;p&gt;I used:&lt;br&gt;
Fastify&lt;br&gt;
TypeScript&lt;br&gt;
Prisma&lt;/p&gt;

&lt;p&gt;And implemented:&lt;br&gt;
JWT access tokens&lt;br&gt;
Refresh tokens stored securely&lt;br&gt;
Token rotation&lt;br&gt;
Logout and revocation&lt;br&gt;
Clean validation&lt;br&gt;
A proper Postman setup to test flows&lt;/p&gt;

&lt;p&gt;The goal was simple:&lt;br&gt;
If I ever start another project, I should be able to reuse this without fear.&lt;/p&gt;

&lt;p&gt;While doing this, a thought came up:&lt;/p&gt;

&lt;p&gt;If I’m learning this the hard way, maybe other developers are too.&lt;/p&gt;

&lt;p&gt;So I tried something small.&lt;br&gt;
I cleaned the project, added proper environment configuration, removed generated files and secrets, and treated it like something that could be reused.&lt;/p&gt;

&lt;p&gt;Then I asked myself a very honest question:&lt;/p&gt;

&lt;p&gt;What if I try selling this — not to make money, but simply to see if anyone finds it useful?&lt;/p&gt;

&lt;p&gt;No big expectations.&lt;br&gt;
No launch hype.&lt;br&gt;
Just curiosity.&lt;/p&gt;

&lt;p&gt;A few things became clear very quickly:&lt;/p&gt;

&lt;p&gt;Marketplaces don’t bring traffic automatically&lt;br&gt;
Backend templates aren’t impulse buys&lt;br&gt;
Selling dev tools is more about trust than features&lt;br&gt;
Preparing something for others forces you to write cleaner code&lt;/p&gt;

&lt;p&gt;And honestly, even if nobody buys it, the exercise itself was worth it.&lt;/p&gt;

&lt;p&gt;I now have:&lt;br&gt;
A solid auth base for my app&lt;br&gt;
A backend I understand deeply because I built it myself&lt;br&gt;
A clearer understanding of how developer products actually work&lt;/p&gt;

&lt;p&gt;I’m sharing this not to aggressively sell anything, but because I see a lot of posts about passive income and overnight success, and very few about the real process.&lt;/p&gt;

&lt;p&gt;The process where you:&lt;br&gt;
Build something for the first time&lt;br&gt;
Learn parts you avoided before&lt;br&gt;
Are unsure about correctness&lt;br&gt;
Put it out there anyway&lt;/p&gt;

&lt;p&gt;If you’ve ever avoided auth because it felt risky, or built backend pieces without fully owning them, you’re not alone.&lt;/p&gt;

&lt;p&gt;I documented what I built and shared it publicly for anyone curious.&lt;br&gt;
The link is available on my profile.&lt;/p&gt;

&lt;p&gt;Sometimes the goal isn’t immediate sales —&lt;br&gt;
it’s learning whether an idea deserves more time.&lt;/p&gt;

</description>
      <category>backend</category>
      <category>learning</category>
      <category>authentication</category>
      <category>mobile</category>
    </item>
  </channel>
</rss>
