Avishek Mishra
Python
Security & Auth: 4/10
Active 2 days ago
+91 (7980) 160889
Invite to interview
Message
Download CVCV
Overview
Technical skills
Timeline
Roles
Overview
Backend Python developer (Middle) focused on building simple FastAPI authentication and user-management services. The strongest proven skill is implementing authentication and user flows as seen in src/user/controller.py using pwdlib for password hashing and JWT-based tokens. The codebase lacks migrations, test coverage, observability, and any implemented AI itinerary logic referenced in the project description.
Technical skills
Python• Middle
Python
FastAPI
SQLAlchemy
Pydantic
Databases
PostgreSQL
Frontend
React.js
React Router
Material UI
Emotion
Vite
ESLint
Socket.IO
Timeline
Frontend Developer II
•
Middle
Holiday inn club vaction
•
Full-Time
React.js
JavaScript
TypeScript
HTMX
CSS Modules
Python
AI Agents
Redux Toolkit
LangChain
Chroma
software engineer
•
Middle
dronahq
•
Full-Time
React.jssince 2020
JavaScriptsince 2020
HTMXsince 2020
CSS Modulessince 2020
Software Engineer 2
•
Middle
Rakuten India
•
Full-Time
React.js
Redux
Redux Toolkitsince 2022
HTMX
CSS Modules
JavaScript
TypeScript
Tailwind CSS
Java
System Engineer
•
Middle
Tata Consultancy Services
•
Full-Time
React.js
Reduxsince 2021
JavaScript
TypeScriptsince 2021
HTMX
CSS Modules
Middle Backend Developer
Confidence: Medium API Engineer
Backend Python developer (Middle) focused on building simple FastAPI authentication and user-management services. The strongest proven skill is implementing authentication and user flows as seen in src/user/controller.py using pwdlib for password hashing and JWT-based tokens. The codebase lacks migrations, test coverage, observability, and any implemented AI itinerary logic referenced in the project description.
API Design
3/10
How well APIs are designed
Basic REST API design with FastAPI routers and response models is present, but there are design issues (GET with body for login), no versioning, no pagination or idempotency patterns, and minimal API contract maturity.
Evidence
Aitenary-backend/src/user/routers.py: signup route uses response_model=UserResponse and status codes
Aitenary-backend/src/user/routers.py: login route defined as GET but accepts loginDTO body
Aitenary-backend/src/user/controller.py: JWT generation and token-returning loginUser function
Data Layer & Database
3/10
Working with databases
Uses SQLAlchemy declarative models and a session factory with dependency injection; however there is no migration history, no explicit transaction handling, and schema definitions are minimal.
Evidence
Aitenary-backend/src/user/models.py: UserModel declarative table definition
Aitenary-backend/src/utils/db.py: create_engine + sessionmaker and get_db dependency
Aitenary-backend/src/user/dtos.py: pydantic DTOs for input/output shaping
Scalability & Performance
1/10
Handling load and speed
Little to no scalability or performance engineering is present - no caching, no queueing, no explicit connection/pool tuning or rate limiting; defaults are used.
Evidence
Aitenary-backend/src/utils/db.py: create_engine called without pool tuning or explicit scaling controls
System Architecture
3/10
Overall system structure
Reasonable small-service separation (user module, utils) and pydantic settings exist, but the overall architecture is a simple monolith without documented service boundaries, graceful degradation, or advanced config/secret management.
Evidence
Aitenary-backend/src/main.py: application wiring imports and (intended) Base.metadata.create_all
Aitenary-backend/src/user/routers.py: modular APIRouter for user endpoints
Aitenary-backend/src/utils/settings.py: pydantic-based settings usage (settings object)
Security & Auth
4/10
Protecting data and access
Concrete authentication implementation exists with password hashing and JWT with expiry and error handling, but token handling is brittle, there is no refresh/revocation, and input validation is only via pydantic models.
Evidence
Aitenary-backend/src/user/controller.py: PasswordHash usage for hashing and verify_password implementation
Aitenary-backend/src/user/controller.py: jwt.encode with exp and try/except for ExpiredSignatureError and InvalidTokenError
Reliability & Observability
2/10
Stability and monitoring
Some minimal reliability patterns exist (DB dependency yields and basic exception responses), but there is no structured logging, retry/backoff, timeouts, or observability instrumentation.
Evidence
Aitenary-backend/src/utils/db.py: get_db yields a session and ensures session.close() in finally
Aitenary-backend/src/user/controller.py: raises HTTPException for auth errors and token expiry
Expertise
Python• Middle
Industries
Travel & Tourism• Middle
Technologies
Python• Middle
PostgreSQL
SQLAlchemy
FastAPI
Pydantic
Recommendations
- Assign to build and extend RESTful user services and auth flows (signup, login, token validation, user profile) in small-to-medium projects.
- Have them implement production hardening tasks such as DB migrations, input validation improvements, and adding tests for auth and DB interactions.
- Use them to integrate frontend-backend features where clear DTOs and simple API contracts are required, while mentoring on security and scalability practices.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories:
Junior Frontend Developer
Confidence: Medium UI Engineer
Frontend UI engineer (Junior) focused on building React-based interfaces and handcrafted, responsive CSS. The strongest proven skill is visual UI and responsive layout implementation as shown in Heroimage.css and TransportCard.css. There is little evidence of rigorous state management, automated tests, accessibility engineering or measured performance work.
UI Component Architecture
3/10
How interface parts are built
Basic component composition with class-based React components and handcrafted CSS; evidence of component files exists but no deliberate component system, limited composition patterns and some anti-patterns (direct state mutation).
Responsive & Cross-browser
4/10
Works on all screens and browsers
Responsive layouts implemented via CSS media queries and fluid grid patterns across multiple UI modules; shows deliberate responsive breakpoints but no feature-detection or RTL/i18n readiness.
Performance Optimization
1/10
Speed of the interface
Minimal performance work evidenced; uses modern tool (Vite) in deps and sensible CSS (object-fit) but no measured optimizations, code-splitting, virtualization or bundle analysis artifacts.
Accessibility & Semantics
1/10
Usable for everyone
Very limited accessibility practices visible; basic meta and noscript in HTML and a visible hamburger UI in CSS, but no ARIA attributes, focus management or keyboard handling on custom widgets.
State Management & Data Flow
1/10
Managing data in the app
Minimal state-management discipline: simple prop callbacks and local state, direct array mutation, and no evidence of request cancellation, optimistic updates, or state machines.
UX & Visual Polish
4/10
Look and feel quality
Strong visual styling and polished UI surfaces in CSS (hero, cards, filters) with transitions and thoughtful spacing; good visual design work but UX flows, error/edge states and perceived-performance patterns are not systematically implemented.
Verified artifacts
Expertise
HTML & CSS• Junior
React• Junior
Modern Web Frameworks• Junior
Industries
Travel & Tourism• Middle
Technologies
Socket.IO
React.js
Vite
Material UI
ESLint
Emotion
React Router
Recommendations
- Design and implement pixel-accurate responsive UI components and pages, leveraging the existing CSS patterns and converting repeated patterns into reusable components.
- Build interactive front-end features with robust state discipline (use hooks, avoid direct state mutation, add request cancellation and optimistic update patterns).
- Improve accessibility and UX edge states by adding ARIA, keyboard focus management, and explicit loading/error/empty states across custom widgets.
Repositories
The developer's experience in this domain has been verified based on AI analysis of the following repositories: