u/DevanshGarg31

Background:
We’ve already imported products in bulk from China before and have also run the classic “buy products upfront→ build Shopify store → run Meta ads” beauty brand model. It actually did pretty well.

Now:
We’re exploring the agency / fulfillment partner model.

Currently explored platforms/services like:
Roposo Clout, Dropship India, ShipEase, BaapStore, DropDash, and suppliers from IndiaMART.

-----------------------
Here’s how I currently see the business:

1. Product Supply

This part already exists. Suppliers on IndiaMART can already:

• sell in bulk
• support dropshipping
• sometimes even warehouse inventory

2. White Labelled Product

A lot of suppliers already offer this too.
Usually:

• same base product
• your logo/branding added
• extra charges for custom branding

3. Packaging

2 categories:

• Basic Dropshipping Packaging: Generic plastic bags/corrugated boxes with maybe your store label for delivery.
• Custom Packaging: Better unboxing experience for brands that want stronger branding instead of generic packaging.

4. Logistics / Fulfillment

Many Possible models:

• Standard Logistics Cost (nationwide) included in product pricing.
• Base product cost + dynamic shipping charged separately per order (on pincode, weight, courier rate basis)
• You choose the shipping partner: Integration with aggregators/couriers like Amazon Shipping, Flipkart, Blue Dart, etc.
• We only handle Backend Ops:
  • product sourcing
  • packaging
  • warehousing
  • …and the client arranges pickup/shipping themselves from our warehouse.

So my main question is:

What do Indian dropshippers actually need?

• You just want to buy products from us (just access to products in low MOQs).
• You want us to fulfill from our warehouse with your branding + labels.
• You want us to also handle the logsitics?

Using Access JWT Token (15 Mins) and Refresh JWT Token (30 Days)
HTTPS Only, SameSite: Strict, Secure Cookies, Domain: *.domain.com, Path for Access Token: /, Path for Refresh Token: /auth/refresh

>BACKEND MIDDLEWARE

Checks access token
If token doesn’t exist → 401 Unauthorized
If token exists, but can’t be verified → 401 Unauthorized
If token is valid, get user account → If no user account → User Not Found Error
Else set req.user → User

>BACKEND Refresh endpoint

Checks refresh token
If token doesn’t exist → refresh token required, 401
If token exists, but can’t be verified → 401 Session expired; And clear cookies
If token is valid, get user account → If no user account → 401, User Not Found Error; And clear cookies
Else generate access, generate refresh → send as cookies

>FRONTEND: Cannot read either access or refresh tokens since both are Http Only Cookies

If request fails (either access token not valid or expired/ not present) → attempt refresh endpoint →
If refresh attempt fails → redirect to login.
Else retry original request (since both cookies refreshed).