Project Overview

TinTorch Account is the identity, billing and launch layer for the TinTorch product suite (CRM, CMS, Forms, Docs, Sign, Lens, Jobs, List, Verify, Transfer) and for independent apps such as Arodya, Duggy and Punya. Every app in the family signs users in through this one service instead of building its own login and payments. Key features: OpenID Connect provider with PKCE and OAuth app registration, workspaces with users and roles, subscriptions and billing, KYC and identity checks, API keys, webhooks, usage metering, notifications, storage and a product catalogue. The home screen shown on the cover is the app launcher every user lands on after sign-in. Runs in production on self-hosted infrastructure in AWS Mumbai (ap-south-1) behind Cloudflare, deployed with Coolify and Docker, with PostgreSQL as the datastore.

Skills

Tech Stack

Next.js, TypeScript, Node.js, PostgreSQL, OpenID Connect / OAuth2 with PKCE, Docker, Coolify, AWS EC2 (ap-south-1), Cloudflare, Caddy

My Role

Sole architect, developer and operator. I designed the OIDC flows, data model and billing, built the service end to end and run the infrastructure it lives on. Result: one login and one billing relationship for the whole product family. About 20 production apps authenticate through it today, and a new product plugs in with a single OAuth app registration instead of re-implementing auth, users, roles and payments.