Login friction at global scale
A global trading platform needed modern login with less friction while staying strong on security for regulated traffic.
Case Study / Identity at Scale
NestJS authentication services for Passkeys / WebAuthn patterns and social login on a global trading platform.
The challenge
Deriv needed identity infrastructure that reduced friction without weakening security for regulated, high-volume traffic.
The delivery path was NestJS services with Passkeys-class patterns, social login, and production API boundaries product teams could depend on.
A global trading platform needed modern login with less friction while staying strong on security for regulated traffic.
Password-centric flows and fragmented social login made product teams slower to improve the identity experience.
WebAuthn / Passkeys patterns had to ship as real NestJS services with clear API contracts, not a prototype.
Auth failures block every product surface, so delivery had to be reliable for teams that depend on login every day.
What we built
At Deriv, we built NestJS authentication services covering Passkeys / WebAuthn patterns, social login, and production API boundaries for a global trading platform.
The result is enterprise identity infrastructure product teams rely on daily — already named on the public Upwork portfolio.
Implemented Passkeys-class authentication flows so users can authenticate with modern, phishing-resistant patterns.
Integrated social login paths behind NestJS services with consistent API boundaries for product teams.
Structured auth services for maintainability, clear contracts, and the traffic profile of a global platform.
Kept identity work aligned with regulated traffic expectations: explicit boundaries, careful rollout, and operational clarity.
What we learned
Passkeys and social login only matter when they ship as owned services with clear contracts. This case study uses the Deriv naming already public on the Upwork portfolio.
Login friction shows up as churn and support load long before it shows up as an engineering ticket.
Passkeys and social login only help when they are production services, not demos.
Modular NestJS services keep OAuth, Passkeys, and social paths maintainable as requirements grow.
Clear modules beat a single auth monolith for long-lived platforms.
Global trading traffic forces explicit API boundaries and careful failure modes.
Enterprise identity work is infrastructure, not a feature toggle.
Outcomes
Enterprise identity infrastructure for Passkeys and social login that product teams rely on daily.
NestJS auth services with production API boundaries suited to global trading traffic.
Start a project
Tell us where work is stalling — a portal, backend, marketplace, staffing system, an AI layer, or cloud ops.
In 30 minutes we’ll map the highest-leverage build first.