AuthVaultix — Developer Authentication, Anti-Piracy Licensing & Prorated Billing Infrastructure
Developer Authentication, Anti-Piracy Licensing & Prorated Billing Infrastructure
01. ARCHITECTURE & BRIEF
Overview
AuthVaultix was my first full-scale SaaS platform from inception to production. Over 5 to 6 months of intense design and engineering, I architected the public landing experience, legal foundations, cookie governance, changelogs, and a developer-first licensing infrastructure. Through rigorous iteration—redesigning the core dashboard 4 times after studying platforms like Auth0 and Supabase—I transitioned the product from decorative complexity to pure, distraction-free utility.
THE CHALLENGE
Engineering a multi-gateway international billing system (Razorpay for India, Paddle for global cards/PayPal, and NOWPayments for crypto) while preventing user friction, geo-pricing mismatches, and subscription credit loss during tier upgrades.
THE SOLUTION
Developed an automatic Geo-IP routing system with manual override toggles and a custom daily-prorated subscription engine that splits remaining days and transfers exact credit value seamlessly. Integrated Google One-Tap, Discord, and GitHub OAuth, alongside RFC 6238 TOTP 2FA that hashes shared secret keys against Unix timestamps mathematically—allowing 100% offline two-factor verification without internet dependencies.
02. ENGINEERING LOGS
From Decorative Fluff to Distraction-Free Utility
I redesigned the core developer dashboard 4 times from scratch. The earliest versions were weighed down by heavy backgrounds, thick borders, and loud gradients because I initially treated dashboards like landing pages. After conducting deep UX studies on Auth0 and Supabase, I realized developer tooling requires extreme visual discipline: minimal decoration, rapid navigation, and absolute data legibility.
- Eliminated decorative gradient noise in favor of high-contrast data tables
- Engineered streamlined API key generation and hardware ID (HWID) management views
- Built instant real-time telemetry metrics for active user sessions and license states
Geo-IP Routing & Zero-Penny-Loss Prorated Upgrades
Handling international payments required integrating three distinct providers: Razorpay for domestic Indian transactions, Paddle for global credit cards and PayPal, and NOWPayments for cryptocurrency. I engineered an automated Geo-IP filter that detects client locations to serve the optimal gateway while preserving a manual switch toggle.
- Dynamic daily proration algorithm: calculated unspent days when moving between tiers (e.g. $5 Hobby to Pro) and credited the exact remainder toward the upgrade
- Unified webhook handler synchronizing license keys and tier entitlements across all 3 gateways
- Zero-friction localized pricing checkout flows with zero manual intervention required
OAuth Matrix & RFC 6238 Mathematical Time-Based 2FA
Engineered a seamless multi-provider authentication suite with Google One-Tap, Discord, and GitHub OAuth, backed by custom password reset pipelines and offline Two-Factor Authentication.
- How Offline 2FA Works: Utilizes the RFC 6238 TOTP algorithm where server and authenticator app share an initial secret key. Both independently hash the secret against the current 30-second Unix epoch window using HMAC-SHA1
- Because validation is a pure local mathematical calculation based on time, users generate valid verification tokens 100% offline with zero cell signal or internet required
- Protected against replay attacks with single-use token consumption windows
5-6 Months of Ground-Up SaaS Architecture
As Co-Founder and Lead Frontend Designer, AuthVaultix was my masterclass in building a complete digital product. From designing the initial converting landing pages and cookie governance to authoring comprehensive privacy/legal frameworks, changelogs, and developer docs on a blazing-fast LAMP stack without framework overhead.
- Built on pure PHP, TailwindCSS v3, and MySQL for ultra-fast response times and zero runtime bloat
- Designed comprehensive legal, privacy, cookie governance, and changelog pages
- Created developer-ready SDK integration guides and anti-piracy licensing documentation
03. DELIVERABLES & STACK
KEY DELIVERABLES
- High-Converting Landing Architecture
- Distraction-Free Developer Dashboard
- Geo-IP Smart Tri-Gateway Billing Engine
- Prorated Subscription Upgrade Algorithm
- OAuth & Mathematical Offline 2FA Engine
- Anti-Piracy & HWID Lock Licensing APIs