SpireStockDevelopers
DocsAPI ReferenceWebhooksSDKsChangelog
OpenAPI SpecGo to Dashboard

Changelog

A chronological log of additions, changes, fixes, and deprecations to the SpireStock API and developer platform.

View as Markdown
v1.1.1

Session Integrity & Endpoint Fixes

  • FixedLogging out, changing your password, or signing in again now genuinely revokes the previous session token. This was already the documented behaviour but was not enforced, so older tokens kept working.
  • FixedEvery issued token is now unique. Two tokens minted for the same user within the same second used to be identical, so rotating a session in that window left the old token valid.
  • FixedValidation failures raised inside service layers now return their real status (usually 400) instead of 500 Internal Server Error.
  • FixedRepaired report, export and dashboard endpoints that returned 500 on every call, including the SKU sales, performance, product secondary, delivery challan, packing station, truck sheet and amount-to-be-paid exports.
v1.1.0

API Keys & Webhooks

  • AddedAPI key authentication via the X-API-Key header, with read/write and per-resource scopes. Keys skip the Turnstile and single-session constraints that apply to browser JWTs.
  • AddedCustomer webhooks for order.created, order.delivered and user.created, with HMAC-SHA256 signatures over {timestamp}.{body}.
  • AddedWebhook management endpoints under /developer: create, update, delete, rotate signing secret, send a test delivery, and read the delivery log.
  • AddedAutomatic delivery retries with exponential backoff, and an SSRF guard that rejects webhook URLs pointing at private, loopback or reserved addresses.
v1.0.0

Initial Release

  • AddedSpireStock REST API v1 with JWT authentication
  • AddedOrder management endpoints (CRUD + status flow)
  • AddedUser management (distributors, retailers, employees)
  • AddedProduct catalog with variants
  • AddedDashboard statistics and analytics
  • AddedExport endpoints (XLSX, PDF) for orders, users, sales, attendance
  • AddedWorkspace configuration and member management
  • AddedMulti-tenant architecture with organization scoping
  • AddedRate limiting (120 req/min general, 20/15min login)
  • AddedOpenAPI 3.0 specification with Swagger UI
  • AddedDeveloper portal with interactive documentation