Overview
The back office dashboard for MEXAR international remittance system. Built with Next.js, MUI, and TailwindCSS. Integrates via API with the core backend and KYC services for data visualization.
Tech Stack
- Frontend โ Next.js, MUI, TailwindCSS
- Backend โ PHP/Laravel (API)
- Database โ PostgreSQL, Redis
Access Control
- Granular ACL โ 235 permissions with customizable roles; all routes deny-by-default, UI components conditionally render based on the userโs permission set
- Forced MFA โ Multi-factor authentication required for all users
- Short Sessions โ Aggressive session expiry with GEO location detection for anomaly monitoring
Security
- Cookie Hardening โ HttpOnly, Secure, SameSite cookie attributes
- CSRF Protection โ Token-based cross-site request forgery prevention
- IDOR Prevention โ Object-level authorization checks on all protected resources
- Security Headers โ CSP, HSTS, X-Content-Type-Options, Referrer-Policy
Engineering Challenges
- Scale โ Thousands of components with complex multi-step forms across the entire remittance operation workflow
- Cross-component State Management โ Coordinating state across deeply nested and interdependent components while maintaining performance and consistency
Design Principles
- Scalability โ Designed to handle growing transaction volumes and operational complexity
- Extensibility โ Modular UI components enabling rapid iteration as regulatory requirements evolve
