CHANGELOG
Track the evolution of Boottify — every feature, fix, and improvement since day one
Latest Version
Releases
Features Added
Bugs Fixed
Improvements
Development Started
v3.2.0
LATESTFebruary 21, 2026User Invite, Owner Role & Infrastructure Expansion
New Features(21)
- •Admin user invite page — send email invitations or generate temporary passwords for new users
- •OWNER role with unrestricted platform control — manage, elevate, and delete any user including admins
- •Kubernetes CronJobs management — schedule, view, and manage recurring workloads
- •Kubernetes DaemonSets management — deploy and monitor node-level workloads
- •Kubernetes StatefulSets management — manage stateful workloads with persistent storage
- •Kubernetes Jobs management — run and track one-off batch workloads
- •Kubernetes Network Policies — define and enforce pod-to-pod network access rules
- •Kubernetes Resource Quotas — set namespace-level CPU, memory, and object limits
- •Kubernetes ConfigMaps management — create and edit configuration data for pods
- •Kubernetes YAML editor — apply raw YAML manifests directly to the cluster
- •Server backup manager with encryption — create, schedule, and restore encrypted backups with S3 upload
- •Server cron job manager — view, create, and manage system-level cron schedules
- •Server database manager — MySQL database creation, backup, and credential management
- •Server Nginx manager — edit configurations, reload server, manage virtual hosts
- •Server Redis manager — monitor memory usage, key counts, and configuration
- •Server package manager — install, update, and remove system packages via apt
- •Server certificate manager — view SSL certificates with expiration alerts
- •Server performance monitoring — CPU, memory, disk, and network load graphs over time
- •S3 object storage configuration and connectivity testing
- •Deleted apps recovery — 30-day grace period with restore option before permanent deletion
- •Social media links configuration in admin settings
Improvements
- •Workflow visualization data regeneration now runs after every code change
- •Standardized loading skeletons across all admin and client pages
- •Infrastructure overview page consolidating server, cluster, and service status
Bug Fixes
- •Fixed invite link routing — /admin/users/invite no longer falls through to dynamic [id] route
- •Fixed Docker image names to conform to OCI lowercase specification
v3.1.0
February 14, 2026Blog Engine & Content Platform
New Features(19)
- •Full blog system with posts, categories, tags, and comment moderation
- •TipTap rich-text editor with toolbar — bold, italic, headings, lists, blockquotes, and code blocks
- •Image upload dialog for embedding images into blog posts
- •YouTube embed dialog for inline video content
- •GitHub import dialog — pull code snippets and content directly from repositories
- •Blog post scheduling — set publish dates in the future with automatic release
- •Blog comment moderation panel — approve, reject, and flag spam comments
- •Blog tag merge tool — consolidate duplicate tags without losing associations
- •Blog analytics — per-post view counts, engagement rates, and comment activity
- •Blog likes and bookmarks — readers can like and save articles
- •Reading progress indicator on blog post pages
- •Auto-generated table of contents from article headings
- •Related posts recommendation engine based on tags and categories
- •Social share buttons on blog posts (Twitter, LinkedIn, Facebook)
- •Blog search with full-text filtering across titles, content, and tags
- •Blog author pages showing posts by each contributor
- •Recent blog posts carousel on the landing page
- •Blog post featured image with auto-generated cyber-industrial style thumbnails
- •Admin legal pages editor — manage Terms of Service and Privacy Policy content from the dashboard
Improvements
- •Replaced ~3,796 hardcoded color values across 148 files with CSS design tokens
- •Seed scripts for blog content and help articles
Bug Fixes
- •Fixed TipTap SSR hydration mismatches in editor components
- •Fixed blog post slug generation with special characters
v3.0.0
February 10, 2026WebAuthn Biometrics & Security Hardening
New Features(15)
- •WebAuthn biometric authentication — Touch ID, Face ID, and Windows Hello support
- •Passwordless login with discoverable passkey credentials (resident keys)
- •Multi-device credential management — register and manage biometric devices across platforms
- •Smart device nicknames — auto-detected names like "Windows Hello", "Touch ID (Mac)", "Face ID (iPhone)"
- •Device fingerprinting — SHA-256 fingerprint from browser, OS, and language for cross-device tracking
- •Device trust management — mark devices as trusted, view device activity, and unlink devices
- •Session-to-device binding — every session linked to the device that created it
- •Credential backup status tracking — shows if passkeys are synced to cloud
- •Biometrics can optionally skip 2FA verification for faster login
- •Device management API — view all registered devices with browser, OS, and last-seen metadata
- •User preferences API — session timeout and display settings persisted per user
- •5-tier rate limiting across all 23 authentication API routes
- •Rate limit response headers — X-RateLimit-Remaining, X-RateLimit-Reset, Retry-After
- •SSH hardening — key-only authentication, fail2ban with permanent bans, GeoIP blocking for 54 countries
- •UFW firewall restricted to authorized IP addresses only
Improvements
- •Console.log replaced with structured logger across 10 infrastructure files (~147 statements)
- •Composite database indexes on 5 high-traffic query patterns
- •Revalidation caching on 7 high-traffic API routes
- •SkipLink and ARIA landmarks added across all layouts for screen reader support
- •24 TODO/FIXME comments resolved across the codebase
Bug Fixes
- •Fixed OAuth callback collision with 2FA token verification
- •Fixed WebAuthn RP ID mismatch when authenticating across subdomains
Breaking Changes
- •WebAuthn RP ID migrated from control.boottify.com to boottify.com — existing credentials use dual-RP verification
- •proxy.ts replaces middleware.ts for Next.js 16 compatibility
v2.8.0
January 27, 2026Session Management & Profile Enhancements
New Features(8)
- •Active sessions management — view all sessions across devices with browser, OS, IP, and location
- •Remote session revocation — sign out any session from the security settings panel
- •Session idle timeout with progressive warnings at 2 minutes and 1 minute before auto-logout
- •Heartbeat endpoint to extend active sessions without page reload
- •User avatar display in the sidebar navigation
- •Avatar upload with image cropping in profile settings
- •Notification preferences — control email notifications per category (billing, security, marketing)
- •Session activity tracking — monitors mouse, keyboard, touch, and scroll events with 1-second throttle
Improvements
- •Badge component refactored to semantic <span> element for valid nested HTML
- •Hydration compatibility improvements across all client components
- •Mobile sidebar responsiveness improved with touch-safe interactions
Bug Fixes
- •Fixed hydration error with Badge component when rendered inside buttons
- •Fixed View Sessions button not opening the sessions dialog
- •Fixed session cookie not persisting across subdomain navigation
v2.5.0
January 15, 2026Control Center 2.0 — Full Platform Redesign
New Features(23)
- •Complete cyber-industrial design system — dark high-contrast theme with #d2f800 brand accent
- •Multi-domain architecture — boottify.com for marketing, control.boottify.com for dashboard
- •Redesigned landing page with hero section, feature grid, pricing cards, and blog carousel
- •Interactive tech stack page with architecture layers, role hierarchy pyramid, and animated terminal
- •Contact page with topic selector, location cards, and enterprise inquiry form
- •About page with company story, values section, and hiring CTA
- •Changelog page with version history, stats, and categorized change types
- •Careers page with department filters and open position cards
- •Responsive sidebar navigation with role-based menu visibility
- •PageHeader component with breadcrumbs across all admin and client pages
- •ResponsiveTable component — mobile-friendly data tables with card view on small screens
- •BottomSheet component for mobile-optimized action menus and modals
- •ResponsiveModal that switches between dialog (desktop) and bottom sheet (mobile)
- •ResponsiveTabs that collapse into a dropdown on mobile viewports
- •DataPageShell component for consistent data page layouts with search, filters, and pagination
- •EmptyState component for zero-data pages with illustrations and CTAs
- •StatusBadge, RoleBadge, PriorityBadge, and CategoryBadge components
- •ActionMenu and ContextMenu components for row-level actions
- •ConfirmDialog component for destructive action confirmation
- •SearchInput with built-in debouncing
- •TouchSafeClick wrapper for reliable mobile touch interactions
- •Cookie consent provider with preference persistence
- •Scroll-reveal animations on landing page sections
Improvements
- •Every button uses squared corners (rounded-[2px]) per design system
- •All headings are uppercase, extra-bold (font-black), tight tracking
- •Cards have subtle border-white/10 borders with #d2f800 hover accents
- •Background grid overlay pattern at 5% opacity for visual depth
- •Gradient section backgrounds from #080c14 to #121620
- •Monospace font for labels, counters, and code snippets
- •cn() utility for class name merging (clsx + tailwind-merge)
Breaking Changes
- •Authentication routes moved from boottify.com to control.boottify.com
- •Old URL paths without /admin or /client prefix no longer resolve
v2.0.0
December 15, 2025Kubernetes Orchestration & App Deployment Platform
New Features(18)
- •Full Kubernetes cluster management dashboard — pods, deployments, namespaces, services, and nodes
- •Pod management — view status, resource usage, restart, and stream live container logs
- •Deployment management — create, scale replicas, trigger rolling updates, and rollback to previous versions
- •Namespace management — create isolated environments with resource quotas
- •Kubernetes Services — configure ClusterIP, NodePort, and LoadBalancer service types
- •Ingress management — HTTP/HTTPS routing rules with TLS certificate binding
- •Kubernetes Secrets management — securely store and rotate credentials and API keys
- •Kubernetes Autoscaling — Horizontal Pod Autoscaler (HPA) configuration based on CPU/memory metrics
- •Kubernetes Storage — manage PersistentVolumes, PersistentVolumeClaims, and StorageClasses
- •Kubernetes Events viewer — real-time cluster events with resource filtering
- •Kubernetes Node monitoring — capacity, allocatable resources, conditions, and system info
- •10-step automated deployment pipeline — domain verification, DNS, database, storage, config, deploy, Nginx, SSL, health check, email provisioning
- •Deployment rollback with automatic cleanup of failed deployments
- •Docker container lifecycle management — create, start, stop, restart, remove, and inspect containers
- •Docker image management — list, pull, and cleanup unused images
- •Docker network management — create networks and attach containers
- •Real-time deployment status via WebSocket streaming
- •App sleep/wake for cost optimization — scale to zero when inactive
Improvements
- •Deployment events now emit real-time status updates at each pipeline step
- •Pod log viewer supports multi-container pods with container selector
- •Kubernetes client auto-detects kubeconfig vs in-cluster configuration
Bug Fixes
- •Fixed K8s namespace naming to use app-${fullAppId} pattern consistently
- •Fixed Traefik global HTTP-to-HTTPS redirect blocking ACME HTTP-01 challenges
Breaking Changes
- •K8s namespace naming changed from boottify-${shortId} to app-${fullAppId}
v1.8.0
November 20, 2025Email Marketing & Campaign Platform
New Features(14)
- •Email marketing dashboard with campaign, template, list, and subscriber metrics
- •Campaign builder — create campaigns with recipient lists, templates, subject lines, and scheduling
- •Campaign analytics — send/delivery counts, open rates, click-through rates, bounce rates, and unsubscribe tracking
- •Email template editor — WYSIWYG editor with desktop/mobile preview and raw HTML source view
- •Subscriber list management — create lists, add/remove subscribers, bulk import/export
- •Double opt-in support with customizable welcome emails
- •Campaign batch sending with per-minute rate limiting to avoid spam filters
- •Click and open tracking pixels embedded in campaign emails
- •IMAP email client — connect external email accounts with full inbox, compose, and folder management
- •Email account switcher for managing multiple connected mailboxes
- •Email compose modal with to/cc/bcc fields, formatting, and attachments
- •Email folder navigation with unread counts and label management
- •Email search across all connected accounts
- •Admin email mailbox provisioning — create mailboxes for deployed applications
Improvements
- •IMAP client split into connection, commands, and parser modules for maintainability
- •Campaign sender split into builder, executor, and tracking modules
Bug Fixes
- •Fixed IMAP connection timeout on large mailboxes
- •Fixed campaign send failing silently when template contained invalid HTML
v1.6.0
October 25, 2025Webhooks, Job Postings & Help Center
New Features(11)
- •Webhook management — create webhooks with event type filtering, custom headers, and retry logic
- •Webhook delivery logs — full request/response history with status codes and timing
- •Webhook testing — send mock payloads to verify endpoint configuration
- •Job postings system — create and manage career listings with department, location, and salary info
- •Job posting analytics — track views and application counts per listing
- •Help center with searchable knowledge base and category-organized articles
- •Help article editor with markdown support and category assignment
- •Help categories management — organize articles for intuitive navigation
- •Support ticket system — customers can submit tickets with priority levels
- •Ticket detail view with conversation history and status updates (Open, In Progress, Resolved, Closed)
- •Feature flags system — toggle features on/off with category grouping for A/B testing and gradual rollouts
Improvements
- •Shared job posting form for both create and edit flows (~520 lines saved)
- •Webhook retry logic with exponential backoff
Bug Fixes
- •Fixed webhook event filtering not applying to nested event types
- •Fixed help article search not indexing newly created content
v1.4.0
September 28, 2025Marketplace, Templates & App Store
New Features(8)
- •App marketplace — searchable, filterable catalog of pre-built application templates
- •App template detail pages with description, screenshots, tags, requirements, and deploy button
- •Admin app template management — create templates with GitHub repository, icon, tags, and category
- •One-click deploy from marketplace — select template, configure name/domain, choose plan, and deploy
- •Template deployment tracking — view how many times each template has been deployed
- •Featured templates with promoted placement in the marketplace
- •Category and tag filtering in the marketplace with search
- •Marketplace admin curation — approve, reject, and feature community templates
Improvements
- •Template cards show deployment count and rating
- •Marketplace search returns results across title, description, and tags
v1.3.0
September 5, 2025Status Page & Real-Time Monitoring
New Features(10)
- •Public status page showing real-time health of all platform services
- •Service health grid — operational, degraded, and outage states for Database, API, Auth, CDN, Redis, and WebSocket
- •90-day uptime chart with daily breakdown and incident markers
- •Performance metrics panel — response time, requests per minute, and error rate graphs
- •Real-time system metrics — CPU, memory, disk, and network usage with WebSocket push (500ms) and polling fallback (2s)
- •Incident timeline — active and resolved incidents with timestamped status updates
- •Incident notification subscription — email alerts when services degrade
- •Prometheus-compatible /api/metrics endpoint for external monitoring tools
- •Domain status page — shows app provisioning state, suspension notices, DNS instructions, and termination countdowns
- •Health route with degraded mode — returns 200 when Redis is down, 503 only when database is unreachable
Improvements
- •Status page auto-refreshes without full page reload
- •Metrics history cached for 60 seconds to reduce database load
Bug Fixes
- •Fixed WebSocket reconnection loop when server restarts
- •Fixed uptime calculation not accounting for partial-day incidents
v1.2.0
August 10, 2025Domain Management & SSL Automation
New Features(10)
- •Custom domain management — add, verify, and configure domains for deployed applications
- •DNS verification via TXT records for domain ownership proof
- •Automatic SSL certificate provisioning via DNS-01 ACME challenge with Hetzner DNS API
- •SSL certificate monitoring dashboard — view all certificates with expiration dates and renewal status
- •Nginx reverse proxy auto-configuration for custom domains pointing to Kubernetes services
- •Subdomain availability checker — validates and reserves app subdomains
- •DNS record sync service — keeps Hetzner DNS records in sync with application configuration
- •Certbot integration for HTTP-01 challenges on Kubernetes app custom domains
- •SSL auto-renewal with cron-based scheduling
- •Certificate import for externally-issued SSL certificates
Improvements
- •SSL certificates stored at /home/boottify/certs/ for reliable access permissions
- •ACME account key persisted in environment variables for consistent certificate issuance
Bug Fixes
- •Fixed DNS-01 challenge TXT record cleanup after certificate issuance
- •Fixed Nginx config reload failing when syntax validation errors are present
v1.1.0
July 18, 2025Server Administration Panel
New Features(18)
- •Server overview dashboard — system status, CPU/memory/disk usage, key services, and uptime
- •Process manager — real-time process list with CPU/memory usage, process tree view, and signal controls (kill, pause, resume)
- •Systemd service manager — start, stop, restart, enable, and disable services with status monitoring
- •Systemd timer viewer — scheduled timer jobs with next-run countdown
- •Network interfaces panel — IP addresses, MTU settings, and link status per interface
- •Active network connections table — TCP/UDP connections with associated process info
- •Listening ports overview — all open ports with service identification
- •IP routing table viewer and editor
- •ARP cache table — MAC address resolution and neighbor discovery
- •Firewall management — UFW rule creation, port blocking, and IP allow/deny lists
- •Storage overview — mounted filesystems, usage percentages, and inode information
- •Block devices panel — partitions, mount status, and device hierarchy
- •Disk I/O statistics — read/write rates and operations per device
- •Security dashboard — fail2ban jails, SSH session monitoring, and failed login history
- •Server logs viewer with severity filtering and search
- •Platform audit logs — comprehensive activity trail with user, action, resource, and timestamp filtering
- •Log settings — configure retention policies and log level thresholds
- •Server update manager — view available system updates and apply security patches
Improvements
- •Process detail modal shows full command line, environment, and resource limits
- •Service detail panel shows unit file, dependencies, and recent journal entries
Bug Fixes
- •Fixed process tree not rendering child processes correctly on multi-core systems
- •Fixed firewall rule ordering not being preserved after reload
v1.0.0
June 15, 2025General Availability — Billing, Subscriptions & Checkout
New Features(17)
- •Stripe payment integration with checkout sessions and webhook handling
- •Subscription management — create, pause, cancel, and resume recurring subscriptions
- •Invoice generation and tracking with line items, tax calculations, and payment status
- •Refund processing — submit, approve, and track refund requests with audit trail
- •Admin billing dashboard with MRR calculation, churn rate, and revenue metrics
- •Subscription plans with monthly/yearly billing periods, feature lists, and pricing tiers
- •Shopping cart with item management, quantity updates, and pricing breakdown
- •Checkout flow with Stripe payment form, cart review, and order confirmation
- •Client billing portal — view invoices, payment history, and subscription details
- •Tax rate management — configure tax rates per region for invoice calculations
- •Payment method storage for recurring billing
- •Billing email notifications — invoice generated, payment success/failure, subscription changes, refund updates
- •Deploy wizard — multi-step flow: template selection, app naming, domain setup, plan choice, and payment
- •Deploy success/cancel pages with auto-close popup support for embedded checkout
- •Usage tracking — monitor API calls, storage, bandwidth, deployments, and build minutes per billing period
- •Usage aggregation for plan limit enforcement with overage alerts
- •Plan upgrade flow — compare plans, select billing period, and confirm with prorated pricing
Improvements
- •Stripe webhook handlers for invoice and subscription lifecycle events
- •Payment confirmation emails sent asynchronously to avoid blocking checkout
Bug Fixes
- •Fixed Stripe webhook signature verification failing on certain payload formats
- •Fixed subscription status not updating after successful payment retry
v0.9.0
May 15, 2025GitHub Integration & CI/CD Pipeline
New Features(11)
- •GitHub App integration — connect repositories with OAuth and installation-based access
- •GitHub repository browser — list, search, and select repositories for deployment
- •GitHub Actions workflow management — trigger, monitor, and view workflow runs
- •Deployment workflow file generation — auto-create GitHub Actions deploy pipelines for connected repos
- •Real-time deployment step webhooks — progress updates at each pipeline stage
- •Admin GitHub connection panel — manage installations, test connectivity, and view access tokens
- •Repository commit history viewer — browse recent commits per connected repo
- •Figma integration — connect design files for design-to-code sync
- •Figma frame viewer with design token extraction
- •Side-by-side Figma vs implementation comparison view
- •Figma sync status tracking with manual refresh
Improvements
- •Resilient npm install with fallback strategies for Docker builds
- •GitHub webhook signature verification for secure event handling
Bug Fixes
- •Fixed GitHub OAuth state parameter not being validated on callback
- •Fixed Docker build failing when package-lock.json is out of sync
v0.7.0
April 10, 2025Application Management & Client Portal
New Features(12)
- •Client application dashboard — grid/card view of deployed apps with status, plan, and last activity
- •Application detail page — deployment status, subscription info, plan features, usage metrics, and danger zone
- •Environment variable management — add, edit, delete env vars with secret masking and visibility toggle
- •Application logs viewer — real-time logs filtered by type (deployment, build, app, error) with auto-refresh
- •Deployment history — view past deployments with status, duration, and trigger info
- •App feature breakdown by category — applications, storage, API, and bandwidth with usage limits
- •Application usage metrics — API calls, storage, bandwidth with percentage of plan limit and alerts
- •Admin applications table — view all platform applications with status filtering, search, and management actions
- •App cleanup utility — identify and remove orphaned or stale applications
- •Multi-tenant app hosting — serve deployed apps at *.boottify.com subdomains with isolated routing
- •Tenant database provisioning — per-app MySQL databases with encrypted credentials
- •Tenant storage provisioning — isolated file storage paths per application
Improvements
- •Application cards show real-time deployment status indicator
- •Admin applications table supports bulk actions (suspend, delete)
Bug Fixes
- •Fixed env var editor losing unsaved changes on page navigation
- •Fixed application status not reflecting latest deployment state
v0.5.0
March 5, 2025Order System & Admin Dashboards
New Features(9)
- •Order management system — create, view, and manage customer orders with line items and pricing
- •Order detail page with status timeline, payment tracking, and action buttons (approve, pay, refund, cancel)
- •Order messaging — threaded communication between admin and client on each order
- •Admin dashboard with real-time metrics — total users, applications, orders, and system health widgets
- •Admin analytics page — user/order distribution by role and status, 30-day trend charts
- •Admin services management — create and manage platform add-on services with pricing and feature lists
- •Admin plans management — create subscription plans with pricing, billing periods, and feature configuration
- •Plan duplication — copy existing plans as templates for quick creation
- •Client dashboard — personal overview of active apps, pending orders, recent activity, and quick actions
Improvements
- •Dashboard widgets auto-refresh every 60 seconds
- •Analytics charts support 7-day, 30-day, and 90-day ranges
Bug Fixes
- •Fixed order total calculation not including tax rates
- •Fixed dashboard widget counts showing stale data after mutations
v0.4.0
February 10, 2025Two-Factor Authentication & OAuth Providers
New Features(14)
- •TOTP-based two-factor authentication — 6-digit codes with 30-second rotation
- •2FA setup wizard with QR code generation for authenticator apps
- •10 cryptographically-secure backup codes generated on 2FA activation
- •Backup code regeneration with password verification
- •2FA verification flow as secondary challenge after password login
- •Method switcher — choose between TOTP code and backup code during verification
- •Google OAuth integration — sign in with Google account
- •GitHub OAuth integration — sign in with GitHub account
- •OAuth account linking — connect social accounts to existing platform accounts
- •OAuth-only accounts — users created via social login without password
- •OAuth first-time signup — automatic account creation on first social login
- •CLI device code authentication — RFC 8628 Device Authorization Grant for command-line login
- •CLI user code approval page — browser-based code confirmation for CLI sessions
- •CLI token exchange — device code exchanged for API token after approval
Improvements
- •2FA disable requires password verification for safety
- •Failed 2FA attempts tracked in database for security auditing
- •OAuth state parameter validation with PKCE for CSRF protection
Bug Fixes
- •Fixed TOTP verification failing during the 30-second code transition window
- •Fixed OAuth callback not handling email-unverified accounts from GitHub
v0.3.0
January 15, 2025User Management & Role-Based Access Control
New Features(14)
- •User management panel — view, filter, search, and manage all platform users
- •5-tier role hierarchy — Owner, Admin, Manager, Developer, and Client with numeric permission levels
- •Role-based dashboard routing — users automatically redirected to their appropriate zone after login
- •Admin zone protection — Owner, Admin, and Manager roles only
- •Client zone protection — all authenticated users with role-appropriate menu visibility
- •User profile editing — update name, email, role, and account status
- •User status management — Active, Inactive, Suspended, and Banned states
- •Account deactivation with session termination — all sessions invalidated when account is disabled
- •Admin user detail page with profile section, role info, and account activity
- •Structured API error handler with error codes, trace IDs, and detailed responses
- •Request tracing with X-Trace-ID headers for end-to-end debugging
- •Structured logging system with DEBUG, INFO, WARN, ERROR, and CRITICAL levels
- •Log deduplication via fingerprinting to prevent log spam
- •Asynchronous log persistence to error_logs database table
Improvements
- •Role hierarchy supports hasMinimumRole() for permission comparison
- •Error responses include actionable details and trace IDs
Bug Fixes
- •Fixed Manager role being able to modify Admin user accounts
- •Fixed role-based redirect loop when user has no matching zone
v0.2.0
December 10, 2024Authentication System & Session Management
New Features(13)
- •Lucia v3 session-based authentication with database-backed sessions
- •Sign-up flow with email, password validation (8+ chars, uppercase, lowercase, numeric)
- •Sign-in flow with email/password and failed login attempt tracking
- •Password reset flow — forgot password email with cryptographic tokens (1-hour expiry)
- •Password change with current password verification and all-session invalidation
- •Session persistence with 30-day expiration and cross-subdomain cookie sharing
- •Session validation middleware via proxy.ts for protected route enforcement
- •API token authentication — Bearer tokens (btfy_ prefix) with fine-grained scopes (deploy, apps:read/write, env, domains)
- •API token management — generate, list, activate/deactivate, and delete tokens with 25-token limit per user
- •API token usage tracking — last used timestamp, IP address, and usage count
- •Security email notifications — password changed, new login alerts, failed login alerts
- •Security headers — X-Frame-Options, X-Content-Type-Options, CSP, Referrer-Policy, Permissions-Policy
- •HttpOnly secure cookies with SameSite=lax policy
Improvements
- •Bcrypt with 12 salt rounds for secure password storage
- •Email verification tokens use identifier + token pattern for double verification
Bug Fixes
- •Fixed session cookie not being set on first login after signup
- •Fixed password reset tokens being reusable after first use
v0.1.0
November 15, 2024Project Bootstrap & Foundation
New Features(10)
- •Next.js project initialization with TypeScript, Tailwind CSS, and App Router
- •Prisma ORM setup with MySQL database and 268+ model schema
- •Database models for users, sessions, applications, orders, billing, content, and infrastructure
- •Project directory structure — route groups for auth, control center (admin/client), and public pages
- •Environment configuration with .env support for database, auth, email, DNS, and payment credentials
- •Sitemap generation for SEO
- •Error pages — custom 404 Not Found, 500 Server Error, Global Error, and 403 Forbidden
- •ESLint and TypeScript strict mode configuration
- •Comprehensive documentation system — 21 docs pages covering getting started, platform, API, CLI, integrations, security, billing, and troubleshooting
- •Docs search with client-side full-text filtering across all documentation pages
Improvements
- •Path alias @/ mapped to src/ for clean imports
- •Geist Sans and Geist Mono fonts configured as primary typography