A blog or todo API with real auth
Signup, login, JWT, rate limits, typed endpoints, documented OpenAPI. The real backend you keep wanting to build and never finish.
You ship: A clean repo and a live API other people can hit with curl. The bar many junior backend candidates never clear.