OPEN FOR FREELANCE WORK
FULL-STACK DEVELOPER · FOUNDER, AVHAAR

I build the parts of a website that actually have to work.

Payment flows that don't double-charge. Admin systems that survive real users. Backends built for places where downtime isn't an option. I'm Rohan Ranjeet Mishra — based in Mumbai, currently building production systems for a municipal government, a D2C skincare brand, and a real estate builder.

PORTRAIT Rohan Mishra MUMBAI, IN
04Systems built
115Wards in deployment scope
03Languages supported
01Govt. contract in progress
SELECTED WORK

Four systems, four different failure tolerances.

Avhaar

Civic-tech engagement with a municipal corporation — details confidential while the process is ongoing

In process — under evaluation

A civic-tech platform built for a municipal corporation, currently under evaluation with their commissioner's office. I designed and built the full system end to end — public-facing app, role-based admin dashboards, and the native Android wrapper — as founder, not contractor. Project specifics stay confidential while the process is ongoing.

SCOPE — CONFIDENTIAL · CURRENTLY UNDER EVALUATION WITH A MUNICIPAL CORPORATION
ReactCapacitor (Android)FastAPI MongoDB AtlasRedisFirebase FCM Twilio OTPWebSockets
Avhaar company site — avhaar.in ↗

MK Group

Website, CRM and mobile app for a real estate builder's sales & project-management workflow

In progress — multi-project build

An ongoing multi-project engagement, building the digital backbone for a real estate builder's day-to-day operations — a public-facing website, an internal CRM dashboard for tracking leads and sales, and a mobile app built around their project-management workflow. Currently in active development.

SCOPE — WEBSITE · CRM DASHBOARD · MOBILE APP · ONGOING MULTI-PROJECT ENGAGEMENT

Vaidista Organics

First-ever website for an Ayurvedic skincare brand — built from scratch, storefront to admin portal

Live in production

Vaidista Organics didn't have a website before this — I designed and built the entire platform from scratch as their sole developer: storefront, cart and checkout, blog, About/contact pages, and a full admin portal the founder runs the business from day to day. The admin side generates and downloads invoices, marks items out of stock, manages the complete order lifecycle, and sends delivery confirmation emails — no spreadsheets involved. Underneath, I built the payment confirmation flow around Cashfree's webhook so an order only confirms once payment is verified, fixed a hydration race condition that could double-submit orders, shipped a discount/coupon engine, and ran a security hardening pass across the platform.

SCOPE — FULL PLATFORM BUILT FROM SCRATCH · STOREFRONT · BLOG · ADMIN PORTAL · INVOICING · PAYMENTS
Next.js 15Supabase (Postgres)Cashfree ZustandResendVercel

CampusPrint

Print-shop management for a college campus — web app, REST API and an admin desk, built end to end

Live demo — college project

A campus printing service where students upload a document, see the exact price, and follow their print from their phone — while the print desk runs the whole queue from one admin screen. I built it end to end: a Kotlin + Spring Boot REST API with JWT and role-based access (student / admin), a React web app, and a Flutter mobile client in progress. The server does everything a student shouldn't be trusted with — it counts the pages itself and calculates the price, so totals can't be tampered with. Every new account is locked until an emailed one-time code is confirmed, and large prints (20+ sheets) must be paid up front by UPI, with the payment screenshot checked by the desk before printing can start — enforced on the server, not just in the UI. The API is protected with rate limiting, login lockout, hashed codes and strict security headers.

SCOPE — WEB APP · REST API · ROLE-BASED AUTH · EMAIL OTP · UPI PAYMENT FLOW · ADMIN DESK · MOBILE APP IN PROGRESS
KotlinSpring BootReact PostgreSQL (Neon)JWT + BCryptFlutter DockerRenderVercelBrevo
Plus several more projects currently in process.
FROM THE COMMIT HISTORY

A few specific things I fixed.

[FIX] A Cashfree webhook was silently failing on a 307 redirect — root cause was a missing www domain registration.
[FIX] Eliminated a Zustand hydration race condition that could double-submit an order on slow connections.
[SECURITY] Closed an IDOR vulnerability that exposed other users' account data.
[SECURITY] Patched a PostgREST injection vector in the product search/filter layer.
[SECURITY] Locked every /api/admin/* route behind a dedicated request-verification layer.
[INFRA] Added Shiprocket token caching to cut redundant API calls and shipping delays.
[FEATURE] Built an auto-discount + one-time coupon engine with a free-gift selector.
[SECURITY] CampusPrint: payment-gated printing is enforced on the server — a large job can't move to Printing until the desk verifies the UPI proof, whatever the UI shows.
[SECURITY] CampusPrint: page count and price are computed server-side and file types are checked by magic bytes, so a tampered request can't change the amount charged.
[FEATURE] CampusPrint: email-OTP signup — accounts stay locked until a hashed, expiring, attempt-limited code is confirmed.
"
Rohan built our entire website from scratch — storefront to admin portal — and caught security issues we didn't even know we had. Working with him felt like having a senior engineer on call, not a freelancer.
— SHEFALI CHOURASIA, FOUNDER, VAIDISTA ORGANICS
TOOLBOX

What I actually build with.

Frontend

ReactNext.js 15React Native (Capacitor) Tailwind CSSRadix UIZustandFlutter

Backend

FastAPINode.jsREST APIsWebSocketsKotlinSpring BootJWT auth

Data & Infra

MongoDB AtlasSupabase (PostgreSQL)Redis VercelRenderNeon (PostgreSQL)Docker

Integrations

CashfreeTwilioFirebase FCM CloudinaryResendShiprocketBrevo