Changelog
Every feature, improvement, and fix — shipped by the NonStop Corp team. Updated with every release.
Major platform release. Multi-tenant organizations, project-level API keys, Google reCAPTCHA v3 support, and a completely redesigned dashboard.
- NewMulti-tenant organization management with Owner, Admin, Editor, and Viewer roles
- NewProject-level API keys with scoped read access and allowed-origin restrictions
- NewGoogle reCAPTCHA v3 support alongside existing v2 — configurable via environment variable
- NewRedis-backed rate limiting on all authentication and contact endpoints
- NewOrganization and project member invite system with email notifications
- NewNotification centre with per-user read/unread state
- NewGoogle OAuth sign-in via both GSI (one-tap) and redirect flow
- ImprovedDashboard redesigned with full dark/light theme support using CSS variables
- ImprovedSession management — view and revoke individual sessions from account settings
- ImprovedEmail verification flow now uses a 6-digit OTP alongside a magic link
- SecurityAPI keys are now stored as hashed values — plaintext is shown only once at creation
- SecurityJWT access tokens expire in 15 minutes; refresh tokens rotate on every use
- BreakingAPI base path changed from /api to /api/v1 — update all existing integrations
Introduced password reset via OTP, improved email templates, and added account suspension controls for admins.
- NewPassword reset flow with 6-digit OTP delivered via email
- NewAccount suspension and deletion controls for super admins
- ImprovedEmail templates redesigned with dark theme and clearer CTAs
- ImprovedForgot password page now shows a countdown before allowing resend
- FixedFixed OTP expiry not being cleared from Redis after successful verification
- FixedFixed Google OAuth callback failing when redirect URI contained query params
User profile and account settings, notification preferences, and privacy controls.
- NewUser profile page — update name, bio, and avatar
- NewGranular notification preferences: push, platform, org activity, security alerts
- NewPrivacy setting to control whether you can receive team invitations
- ImprovedAccount settings split into Profile, Password, and Sessions tabs
- FixedFixed avatar upload not persisting after page refresh
Google reCAPTCHA v2 integration on signup and login, plus Redis-based rate limiting on auth routes.
- NewGoogle reCAPTCHA v2 (I'm not a robot) on signup and login forms
- NewRedis rate limiting on signup (5/hour), login (10/15 min), and password reset endpoints
- SecurityPasswords now hashed with bcrypt (cost factor 12) before storage
- ImprovedLogin form now shows specific error messages for unverified accounts
- FixedFixed race condition in token refresh interceptor causing duplicate refresh calls
Email verification on signup, improved error handling across all API routes, and Redux state management.
- NewEmail verification required before accessing the dashboard
- NewRedux Toolkit integration for auth, organizations, projects, and notifications state
- ImprovedAll API routes now return consistent error shapes with message and errors fields
- ImprovedAxios interceptor auto-refreshes access tokens on 401 responses
- FixedFixed signup allowing duplicate emails due to missing unique index on User model
Initial public release of BlogAPI. Core authentication, dashboard scaffold, and REST API foundation.
- NewUser registration and login with JWT-based session management
- NewDashboard layout with sidebar navigation and responsive design
- NewREST API foundation at /api/v1 with Next.js App Router route handlers
- NewMongoDB integration via Mongoose with User, Organization, and Project models
- NewDark/light theme toggle with next-themes and CSS variable design tokens
Stay in the loop
New releases ship regularly. Create a free account to get notified about updates that matter to your projects.