Xendit’s Auth Platform is a mission-critical fine-grained authorization system used by product APIs and the merchant dashboard to enforce access controls across financial products, markets, and currency pairs.
I worked in a team of 2 to design and build the platform with OpenFGA, replacing legacy Postgres-based permission checks with a dedicated authorization model. The system supports real-time blocklist and whitelist overrides across 5 financial products and 140+ currency pairs, with source, destination, and pair-level permission granularity.
I also built the access control admin UI that Ops teams use during merchant onboarding. The interface gives operators granular control over which products and currency pairs each merchant can access, making permission changes safer, more explicit, and easier to manage without engineering support.