Pick a stack you are learning (e.g. Node, Python/FastAPI, Java/Spring). Tables below are grouped by classification so you can choose projects that match your goal—CRUD practice, auth, integrations, real time, or deployment. Each row has: Project idea (name), Core idea (main concepts), and Small description (features). Pair with front-end project ideas, Databases hub, and Full stack development hub on Nikhil Learn Hub.
1. CRUD & content APIs
REST-style resources, validation, and content modeling—good first full backend projects.
| Project idea | Core idea | Small description |
|---|---|---|
| Personal blog platform | CRUD, user auth | Users create, read, update, and delete posts; registration/login; comments and post tagging. |
| Task manager API | REST API, status management | Backend for a to-do list: create, update, delete tasks; mark complete/incomplete; optional due dates and filters. |
| Portfolio API | Static JSON, versioning | Serve projects, skills, and contact blocks for a portfolio front end; optional admin-only edit routes. |
| Notes / wiki API | CRUD, slugs, markdown | Pages with titles and body (markdown optional); list, search by title; soft delete or archive flag. |
| Issue tracker lite | State machine, assignments | Tickets with states (open, in progress, closed); assign to users; comment thread per issue. |
| Recipe or menu API | Relations, filtering | Recipes with ingredients list; filter by cuisine or diet tag; scale servings in response logic. |
2. Authentication & access control
Passwords, tokens, sessions, and who can call which route.
| Project idea | Core idea | Small description |
|---|---|---|
| User authentication service | Security, JWT, hashing | Signup/login; bcrypt (or argon2) for passwords; issue JWT for protected routes; refresh or logout story documented. |
| Role-based admin API | RBAC, middleware | Roles such as user vs admin; guards on routes; 401 vs 403 handling; seed an admin user in dev. |
| API key service | Key issuance, revocation | Users generate keys; store hashed keys; rate limit per key; revoke and audit last-used timestamp. |
| Session cookie auth | httpOnly cookies, CSRF note | Server-side session store; Secure + SameSite cookies; document CSRF strategy for cookie-based SPAs. |
| OAuth login backend (stub) | OAuth2 code flow, PKCE | Exchange code for tokens with one provider (e.g. Google); map provider id to local user; no passwords stored for those users. |
3. Data modeling, search & reporting
Relational design, queries, and summaries—classic fresher portfolio depth.
| Project idea | Core idea | Small description |
|---|---|---|
| Expense tracker API | Persistence, reporting | Log expenses with categories; monthly totals and breakdown by category; export CSV optional. |
| Library management system | Relationships, search | Books, members, borrow/return; search by title/author; due dates and overdue/fine rules (simplified). |
| Inventory / stock API | Transactions, low-stock alerts | SKUs, quantity on hand; inbound/outbound movements; alert when below threshold. |
| Habit tracker backend | Time series, streaks | Daily check-ins per habit; streak calculation; simple stats endpoint (last 30 days). |
| Attendance / gradebook API | Joins, aggregates | Students, courses, marks; GPA or average per course; attendance marks per session. |
| Room or seat reservation API | Availability, overlap checks | Book time slots for a resource; reject conflicting bookings; list free slots in a date range. |
4. External APIs, URLs & metadata
Calling third parties, caching, redirects, and safe extraction.
| Project idea | Core idea | Small description |
|---|---|---|
| URL shortener | Hashing, redirects | Long URLs to short codes; 302/301 to original; click counts; optional custom alias collision handling. |
| Weather notification service | API integration, scheduling | Pull OpenWeatherMap (or similar); scheduled job checks forecast; email or console “alert” when rain or extreme temps. |
| Link preview generator | Fetch HTML, parse meta | Input URL; return title, description, image from meta tags; timeouts, size limits, and SSRF caution in README. |
| Exchange-rate cache API | TTL cache, stale-while-revalidate | Fetch rates from a public API; cache in DB or Redis; configurable refresh; historical snapshot optional. |
| News feed aggregator | RSS/Atom parsing | Subscribe to feeds; normalize items; dedupe by URL; paginated list API. |
| GitHub profile stats API | HTTP client, pagination | Use GitHub REST API with token; aggregate public repos, stars, languages (simple counts) for a dashboard. |
5. Real-time & messaging
WebSockets, rooms, and live updates beyond plain REST.
| Project idea | Core idea | Small description |
|---|---|---|
| Chat application backend | WebSockets, real-time | Rooms or DMs; persist messages; delivery/read flags optional; online presence (last seen). |
| Live notifications API | SSE or WebSocket push | Subscribe channel; server pushes alerts when events occur (e.g. new comment); reconnect guidance. |
| Live poll results | Broadcast on vote | REST to vote; WS/SSE broadcasts updated counts; tie-in with voting rules from scheduling section. |
| Collaborative presence (toy) | Room state, heartbeats | Users join a “document” room; broadcast cursor or selection (simplified JSON); handle disconnect cleanup. |
6. Files, uploads & background jobs
Multipart forms, storage, and async workers.
| Project idea | Core idea | Small description |
|---|---|---|
| File upload & processing service | Multipart, queues, storage | Upload images or docs; enqueue resize or metadata extraction; store paths in DB; local disk or S3-style presign (concept). |
| Thumbnail pipeline | Worker queue, idempotency | Job generates thumbnails at multiple sizes; status endpoint for job; retry failed jobs. |
| CSV import batch API | Validation, bulk insert | Upload CSV; validate rows; queue import; report errors per row; partial success handling. |
| Email outbox worker | Queue, retries | API enqueues “send email” jobs; worker sends via SMTP or provider; dead-letter after N failures. |
7. E-commerce & business rules
Carts, pricing logic, and realistic constraints (without real payments if you prefer).
| Project idea | Core idea | Small description |
|---|---|---|
| Simple e-commerce cart | Session or user cart, totals | Add/remove line items; compute subtotal, tax stub, discounts; simulate checkout creating an order record. |
| Coupon / discount engine | Rule evaluation, caps | Codes with percent or fixed off; min order; expiry; stackable vs exclusive rules; unit tests for edge cases. |
| Subscription stub API | Billing periods, state | Plans with monthly/yearly; user subscription state (active/cancelled); webhook handler stub for provider events. |
| Waitlist / RSVP API | Capacity, concurrency | Event with max seats; atomic signup; waitlist promotion when someone cancels; prevent overbooking. |
8. Scheduling, voting & recommendations
Cron-like jobs, aggregation, and ranking—social-style backends.
| Project idea | Core idea | Small description |
|---|---|---|
| Event reminder service | Cron jobs, notifications | Users create events with datetime; scheduler finds due reminders; sends email or logs notification (lab-safe). |
| Poll & voting system | Aggregation, concurrency | Multiple options; one vote per user (or per device id); live result counts; prevent double voting with unique constraint. |
| Movie / book recommendation API | Filtering, sorting, ratings | List by genre, year, rating; users rate items; simple “users like you” or top-rated suggestions. |
| Leaderboard API | Sorted sets, anti-cheat basics | Submit scores with user id; top N board; detect obvious spam (rate limit, max delta) as a learning exercise. |
| Survey backend (branching optional) | Schema for questions, answers | Define surveys; collect responses; aggregate multiple choice; optional skip logic based on prior answers. |
9. Platform: reliability, observability & shipping
How the service runs in dev and prod—still a valid “project” for a portfolio README.
| Project idea | Core idea | Small description |
|---|---|---|
| Health + metrics API | Liveness, RED metrics | /health and /ready; expose request count and latency histogram (Prometheus format optional); document SLOs in README. |
| Docker Compose full stack | Multi-container dev env | App + database (+ Redis optional); volumes; .env.example only—no secrets in git. |
| CI pipeline for API | Lint, test, migrate | GitHub Actions (or similar): run tests, run migrations against ephemeral DB, fail on coverage threshold optional. |
| Backup & restore runbook | pg_dump / logical backup | Script backup; documented restore on clean machine; prove with one dry run screenshot or log. |
| OpenAPI + contract tests | Spec-first, consumer checks | Maintain OpenAPI YAML; generate Postman collection or run Dredd/Schemathesis against dev server. |
Total: 45 back-end project ideas across nine classifications. Use HTTPS and validate all inputs on anything exposed beyond localhost; swap email/SMS for console logs in coursework if you do not have provider keys.