CapShip Pro
What Pro Gets You
A complete, mobile first Starter Kit built to help you skip the repetitive foundation work and start building your actual product.
You are not buying a landing page or a few UI screens. You get a full frontend, a secure backend, native iOS and Android support, authentication, account management, real time infrastructure, and a clean project structure designed to be customized into your own app.
A Complete Frontend Foundation
You get a polished React + TypeScript frontend with a clean, modern interface already structured for a real product.
Included:
Responsive mobile first UI
Login and onboarding flow
Secure session handling
Protected routes and public routes
Dashboard layout with desktop and mobile navigation
Reusable UI components, dialogs, inputs, alerts, loading states, toasts, skeletons,
Account profile and settings pages
Profile name and timezone editing
Account deletion flow
Session expired handling
Offline dashboard state
API client layer and typed request/response models
Zustand state management
WebSocket powered refresh handling
Native safe storage for mobile session tokens
Clean routing structure ready for your own pages, features, and product logic
The frontend is intentionally built as a strong starting point: replace the example dashboard pages with your product and keep the infrastructure already working underneath.
Native iOS and Android Support
You get a Capacitor based mobile app setup that turns the same frontend into native iOS and Android applications
Included:
Android project generation and configuration
iOS project generation and configuration
One command setup and compilation workflow
Configurable app name and bundle/package identifier
Native secure storage for session tokens
Native Google Sign In
Native Sign in with Apple for iOS
Apple Sign In entitlement configuration
Automated native project synchronization
Automated iOS signing-team configuration
Automated Google iOS URL scheme and client ID configuration
A protected native source folder so important native files can be regenerated instead of manually rebuilt
Secure Google and Apple Authentication
The Kit includes passwordless native authentication using Google and Apple.
Included:
Google Sign In for Android and iOS
Sign in with Apple for iOS
Backend ID token verification
Signature verification against provider public keys
Issuer, audience, expiry, subject, and nonce validation
Apple authorization code exchange
Apple refresh token storage and revocation support
Encrypted provider token storage
Protection against invalid, expired, mismatched, or replayed credentials
Secure session creation after authentication
Clear handling for provider errors, invalid credentials, and account conflicts
There are no passwords to build, reset flows to maintain, or password hashes to secure.
Production Oriented Backend
You get a FastAPI backend organized into clear layers instead of one large application file.
Included:
FastAPI API server
PostgreSQL database integration
Redis integration
Async database and HTTP clients
Structured routers, logic, storage, validation, configuration, middleware, and error layers
Typed API request and response models
Centralized application settings
Health check endpoint
OpenAPI documentation during development
Email delivery integration
Background worker structure
Redis pub/sub events
WebSocket infrastructure for real time client refreshes
GeoIP and country aware request context
Cloudflare IP support
Structured logging
The backend is separated cleanly so you can add your own domains, endpoints, database tables, jobs, and workflows without turning the codebase into a mess.
Authentication and Account APIs
The Kit already includes the core account endpoints most products need:
Get current authenticated user
Get user profile
Update profile name
Update timezone
View active sessions
Log out
Start account deletion
Verify deletion with email OTP
Complete account deletion
Native Google authentication
Native Apple authentication
Health checks
Real time refresh socket connection
You begin with a real authentication and account system, not an empty API folder.
Account Security Built In
Security is not left as a future task.
Included:
Secure session tokens
Token hashing
Session expiry handling
Redis backed session tracking
Session invalidation events
Device/session management foundations
Encrypted email storage
Hashed email lookup
Encrypted OAuth provider refresh tokens
Idempotency support for sensitive write operations
Rate limits for authentication and profile actions
Request body size limits
CORS handling
Security response headers
Content Security Policy support
Country and IP request context
Account deletion with session invalidation
Apple refresh token revocation during account deletion
Real Time Infrastructure
The kit includes a real time refresh channel so your app can react when relevant account or dashboard data changes.
Included:
WebSocket endpoint
Authenticated socket connections
Mobile and web session support
Redis pub/sub event flow
Connection registry
Dashboard refresh notifications
Profile refresh notifications
Session invalidation propagation
You do not have to design real time infrastructure from zero when your product needs it.
Email and Account Deletion Flow
Included:
Email template system
OTP generation and verification
Pending deletion state
Secure account deletion confirmation flow
Email notification support
Session invalidation after deletion
Provider token revocation support for Apple accounts
This is especially useful for products that need a serious account lifecycle from day one.
Clean Developer Experience
The project is organized to make customization straightforward.
Included:
Clear frontend and backend separation
Typed TypeScript frontend
Typed Python backend models
Reusable components
Reusable API layer
Reusable validation layer
Reusable error layer
Reusable database query layer
Environment variable templates
Setup script
Compile script
Native sync script
Protected native and plugin source files
Disposable generated build folders
Configurable app name, app ID, Apple team ID, Google IDs, API URL, and backend secrets
You can make the app yours without hunting through random files for configuration.
Start With a Real Production foundation
This boilerplate includes 10,455 lines of real source code across 219 source and primary configuration files, excluding generated builds, dependencies, binaries, caches, and distribution files. The backend contains 5,340 lines of Python covering the FastAPI API, authentication, security middleware, database access, workers, email flows, and real time infrastructure. The frontend contains 4,869 lines of TypeScript and TSX powering the React app, reusable UI, routing, dashboards, API integration, native behavior, and client state. It also includes 127 JavaScript lines for tooling and styling, plus 119 lines across
These figures reflect the current release and may change as future updates, improvements, and feature drops are released. They are provided as an overview of the included codebase, not as a fixed or permanent guarantee of exact file counts or line totals.
What You Can Build With It
This boilerplate is a strong foundation for:
Mobile apps
Member platforms
Marketplaces
Booking systems
Creator tools
AI products
Community apps
Fitness apps
Sports products
Productivity tools
Internal business tools
Consumer apps with Google and Apple sign in
The Short Version
You get the difficult foundation already handled:
Frontend
Backend
Database structure
Authentication
Google Sign In
Apple Sign In
Secure sessions
Account settings
Account deletion
Native iOS support
Native Android support
Real time infrastructure
Email and OTP flows
Security middleware
Scripts and configuration structure