---
title: "Changelog"
description: "Every change to the SpireStock API: new endpoints, breaking changes, deprecations, and fixes."
source: https://0.0.0.0:8006/changelog
---

# Changelog

A chronological log of additions, changes, fixes, and deprecations to the SpireStock API and developer platform.

v1.1.1 2026-08-19

## Session Integrity & Endpoint Fixes

-   Fixed Logging out, changing your password, or signing in again now genuinely revokes the previous session token. This was already the documented behaviour but was not enforced, so older tokens kept working.
-   Fixed Every issued token is now unique. Two tokens minted for the same user within the same second used to be identical, so rotating a session in that window left the old token valid.
-   Fixed Validation failures raised inside service layers now return their real status (usually 400) instead of 500 Internal Server Error.
-   Fixed Repaired report, export and dashboard endpoints that returned 500 on every call, including the SKU sales, performance, product secondary, delivery challan, packing station, truck sheet and amount-to-be-paid exports.

v1.1.0 2026-08-18

## API Keys & Webhooks

-   Added API key authentication via the X-API-Key header, with read/write and per-resource scopes. Keys skip the Turnstile and single-session constraints that apply to browser JWTs.
-   Added Customer webhooks for order.created, order.delivered and user.created, with HMAC-SHA256 signatures over {timestamp}.{body}.
-   Added Webhook management endpoints under /developer: create, update, delete, rotate signing secret, send a test delivery, and read the delivery log.
-   Added Automatic delivery retries with exponential backoff, and an SSRF guard that rejects webhook URLs pointing at private, loopback or reserved addresses.

v1.0.0 2026-06-01

## Initial Release

-   Added SpireStock REST API v1 with JWT authentication
-   Added Order management endpoints (CRUD + status flow)
-   Added User management (distributors, retailers, employees)
-   Added Product catalog with variants
-   Added Dashboard statistics and analytics
-   Added Export endpoints (XLSX, PDF) for orders, users, sales, attendance
-   Added Workspace configuration and member management
-   Added Multi-tenant architecture with organization scoping
-   Added Rate limiting (120 req/min general, 20/15min login)
-   Added OpenAPI 3.0 specification with Swagger UI
-   Added Developer portal with interactive documentation