Overview
The core backend API powering the MEXAR international remittance system. Orchestrates communication across microservices via Webhook and Kafka. Licensed in Indonesia, passing 3 rounds of Bank Indonesia reviews and 3rd party penetration testing.
As CTO of AbleGroup, led the architecture design and development of the entire MEXAR system â Back Office, Backend, and all microservices â with a team of only 3 developers.
Tech Stack
- Backend â PHP/Laravel
- Database â PostgreSQL, Redis
- Message Queue â Kafka, RabbitMQ
- Inter-service Communication â Webhook, Kafka
Security
- Authentication â Forced MFA, short session expiry, GEO location anomaly detection
- Cookie Hardening â HttpOnly, Secure, SameSite cookie attributes
- CSRF Protection â Token-based cross-site request forgery prevention
- IDOR Prevention â Object-level authorization on all API endpoints
- Security Headers â CSP, HSTS, X-Content-Type-Options, Referrer-Policy
- XSS Protection â Input sanitization and output encoding across all endpoints
- ACL Engine â 235 granular permissions with customizable roles; deny-by-default on all routes
- Rate Limiting â Request throttling to prevent abuse and brute-force attacks
- SSL/TLS â Enforced encrypted communication for all API traffic
- IP Whitelist â Restricted access to sensitive endpoints and admin operations
- Audit Trail â Comprehensive logging of all user activities and system events for compliance and forensic analysis
- Compliance â Passed 3rd party penetration testing and 3 rounds of Bank Indonesia reviews
Key Capabilities
- Automatic Transaction Review Pipeline â Rule-based transaction screening evaluating min/max amount limits per entity, currency, and company within configurable time periods; transaction frequency caps per entity; KYC status verification; and AML blacklist checks against flagged entities
Design Principles
- Idempotency â Idempotent transaction processing ensuring data consistency across distributed services
- Scalability â Microservice orchestration designed for horizontal scaling
- Extensibility â Abstract service boundaries enabling rapid partner and provider changes driven by regulatory requirements
