Fayda Auth
TYPE
web
DURATION
2 months
COMPLETED
August 2024
LANGUAGE
TypeScript
MISSION BRIEF
Fayda Auth is a powerful eKYC platform designed to authenticate Ethiopian users using their Fayda ID. It offers a REST API, official SDKs, and a feature-rich dashboard for developers to manage API keys, monitor analytics, enforce rate limits, and customize their authentication flows. The platform ensures security with OTP-based verification, supports both sandbox and production environments, and enables businesses to integrate identity checks into their apps with minimal effort.
VISUAL_EVIDENCE
CORE FEATURES
- OTP-based Fayda ID authentication
- Official TypeScript SDK for quick integration
- Full-featured developer dashboard
- API key generation and management
- Rate limiting controls per API key
- Usage analytics and logs
- Sandbox and production environments
- Organization and project management
- Customizable API configuration
- Email verification and profile setup
- Detailed error reporting
- Live API health monitoring
TECH STACK
- >Next.js for full-stack web application
- >Firebase Authentication & Firestore for secure storage
- >Custom REST API endpoints for Fayda ID verification
- >Rate limiting middleware for abuse prevention
- >Role-based access control (RBAC) for admins and developers
- >Secure API key storage with hashing
- >TypeScript SDK for seamless developer integration
- >Tailwind CSS for responsive dashboard design
- >Serverless functions for OTP initiation and verification
Operational Hurdles
Ensuring secure storage and usage of API keys
SOLUTION_PROTOCOL: Implemented server-side hashing for API keys and restricted key visibility to one-time display
Preventing abuse and API overuse
SOLUTION_PROTOCOL: Integrated dynamic rate limiting with real-time tracking and developer notifications
Designing a seamless developer onboarding experience
SOLUTION_PROTOCOL: Created a guided registration flow, sandbox testing tools, and comprehensive documentation
Maintaining consistent OTP delivery across varying network conditions
SOLUTION_PROTOCOL: Used redundant SMS gateway providers with automatic failover