## Enhanced
### **Security Improvements**
- **Provider Information Abstraction**: Completely removed exchange provider names from user-facing error messages
- **Generic Error Messages**: Replaced provider-specific errors (e.g., "Insufficient balance on binance exchange") with professional, generic messages
- **Internal Details Hidden**: Eliminated technical references to "exchange account refill" and backend architecture details
- **Consistent Messaging**: Standardized all withdrawal error messages across different exchange providers
- **Professional Appearance**: Error messages now appear as native platform responses rather than third-party provider errors
### **Admin Panel Enhancements**
- **Flexible Wallet Management**: Improved wallet editing functionality with enhanced validation system
- **Partial Updates**: Support for editing individual wallet fields without requiring all fields
- **Streamlined UX**: Removed restrictive validation that prevented simple balance adjustments
- **Better Error Handling**: Clear, actionable error messages for admin operations
### **Payment System Modernization**
- **PayPal SDK Migration**: Upgraded to latest PayPal server-side SDK for enhanced security and stability
- **Modern API Integration**: Migrated from deprecated `@paypal/checkout-server-sdk` to `@paypal/paypal-server-sdk`
- **Enhanced Return Flow**: Implemented dedicated PayPal return page with comprehensive status handling
- **Improved Error Handling**: Better error messages and user feedback during payment processing
- **Fixed Return URLs**: Corrected PayPal return and cancel URLs to match frontend routing structure
## Fixed
### **Validation Issues**
- **Wallet Edit Schema**: Fixed schema validation error preventing wallet balance updates in admin panel
- **Optional Fields**: Made all wallet update fields optional to support partial updates
- **Flexible Validation**: Updated validation logic to filter undefined values appropriately
### **Error Message Security**
- **Withdrawal Errors**: Secured all spot withdrawal error messages to prevent information leakage
- **Provider Abstraction**: Removed "binance", "kucoin", "xt" references from user-visible errors
- **Generic Responses**: Implemented user-friendly error messages that don't reveal backend infrastructure
### **Security Vulnerabilities**
- **Dependency Updates**: Patched security vulnerabilities in backend dependencies
- **IP Package**: Updated `ip` package to address security advisories
- **XLSX Package**: Updated `xlsx` package to latest secure version
- **PayPal SDK**: Replaced deprecated PayPal SDK with actively maintained version
## Technical Improvements
### **API Security**
- **Error Handling**: Enhanced error handling across withdrawal endpoints to maintain provider abstraction
- **Schema Flexibility**: Improved validation schemas to support better admin user experience
- **Data Protection**: Strengthened protection of internal system details from end users
### **Build System Enhancements**
- **Webpack Configuration**: Improved build system to handle modern ES modules and complex dependencies
- **Node.js Fallbacks**: Added fallback configuration for Node.js-specific modules (fs, path, crypto, stream, buffer) in browser builds
- **Module Resolution**: Enhanced module resolution for third-party packages with complex dependency structures
- **Build Warnings**: Implemented selective warning suppression for known safe module resolution patterns
- **ES Module Support**: Improved handling of packages using modern ES module exports and lit components
### **Dependency Management**
- **Workspace Configuration**: Optimized pnpm workspace setup for better dependency resolution
- **Centralized Overrides**: Consolidated all `pnpm.overrides` and `peerDependencyRules` to root package.json
- **Version Consistency**: Enforced consistent dependency versions across frontend and backend workspaces
- **Peer Dependency Resolution**: Improved handling of peer dependency conflicts for React 19 and TypeScript 5.9
- **Security Updates**: Updated vulnerable packages including `ip`, `xlsx`, and deprecated PayPal SDK
## Compatibility Notes
### **No Breaking Changes**
- **API Compatibility**: All existing API endpoints maintain the same response structure
- **Error Codes**: HTTP status codes remain unchanged, only error message content has been improved
- **Admin Functions**: Enhanced admin functionality without breaking existing workflows
- **PayPal Integration**: SDK migration maintains full backward compatibility with existing payment flows
- **Build System**: Webpack improvements are transparent to end users and maintain all existing functionality
## Security Notes
### **Information Disclosure Prevention**
- **Provider Anonymity**: Complete abstraction of backend exchange providers from user interfaces
- **Professional Messaging**: All error messages now reflect your platform branding rather than third-party services
- **Infrastructure Protection**: Internal system architecture details are fully protected from user exposure
---
**Upgrade Recommendation**: HIGHLY RECOMMENDED for all production environments, especially those handling financial transactions
Fixed
KYC System Critical Fixes
- User Cache Invalidation: Fixed critical issue where users couldn't access features immediately after admin KYC approval
- Added automatic cache clearing when admin changes KYC application status
- Fixed users having to logout/login or wait for cache expiry to access approved features
- Ensures immediate feature access upon KYC approval
- KYC Level Management Cache: Fixed issue where admin changes to KYC level features/limits didn't apply to existing users
- Added cache invalidation hooks to KYC level model updates
- Bulk operations now properly clear cache for all affected users
- Admin limit edits now apply to users instantly without requiring re-approval
- Automated Verification Cache: Fixed cache invalidation for AI/API automated KYC approvals
- Added cache clearing to verification service endpoints
- Automated approvals now grant immediate feature access
- Fixed delayed access for programmatically approved applications
- Feature Access Logic: Improved user profile feature access logic
- Enhanced status checking to only grant features when KYC status is "APPROVED"
- Fixed edge cases where features were granted before full approval
- More robust validation and error handling for KYC feature parsing
KYC Security Enhancements
- Duplicate Application Prevention: Added protection against multiple KYC submissions for same level
- Prevents users from submitting duplicate applications
- Added proper status validation and user-friendly error messages
- Includes cooldown period for rejected applications
- File Upload Security: Enhanced KYC document upload validation
- Added file magic number validation to prevent MIME type spoofing
- Improved security against malicious file uploads
- Enhanced file content verification beyond MIME type checks
- Input Sanitization: Added comprehensive protection against injection attacks
- SQL injection prevention in admin notes fields
- XSS protection with proper input sanitization
- Length validation to prevent DoS attacks
- Directory Traversal Protection: Enhanced file path security
- Improved path sanitization with multiple security layers
- Prevention of access to system directories
- Comprehensive validation against directory traversal attacks
- Rate Limiting: Added abuse prevention for KYC submissions
- Maximum 3 submissions per hour with Redis-based tracking
- 24-hour cooldown period after rejections
- Graceful fallback when Redis is unavailable
UI Text Spacing Issues
- Level Display Formatting: Fixed missing spaces in KYC level text display
- Fixed "Level1" appearing as stuck together text in admin interface
- Corrected spacing in feature management titles
- Fixed user-facing KYC application and dashboard level displays
- Improved readability across all KYC level interfaces
Admin Navigation Fixes
- Binary Options Menu Structure: Restructured admin binary options menu for better navigation
- Moved Binary Options out of "Trading Infrastructure" to be its own top-level section under Finance
- Added proper href link to main "Binary Options" menu item (was pointing to "#")
- Fixed menu structure to properly display child menu items (Binary Markets and Trading Durations)
- Admin can now navigate directly to /admin/finance/binary and see expandable child menu
- Improved navigation flow and menu organization for binary options management interface
Admin Dashboard Complete Overhaul
- Professional Analytics Integration: Replaced basic charts with enterprise-grade analytics components
- Now uses the same professional chart components as the main analytics system (@/components/blocks/data-table/analytics)
- Integrated high-quality KPI cards, line charts, bar charts, and donut charts with consistent styling
- Enhanced interactivity with hover states, tooltips, and smooth animations
- Professional color schemes and responsive design patterns from the analytics system
- USD Currency Conversion System: Implemented proper revenue calculation with real currency conversion
- Revenue calculations now use existing currency conversion APIs (getFiatPriceInUSD, getSpotPriceInUSD, getEcoPriceInUSD)
- Multi-currency support for FIAT, SPOT, and ECO wallet types with accurate USD conversion
- Transaction fees are properly converted to USD based on currency type and current exchange rates
- Fallback handling when currency conversion fails to ensure system stability
- Comprehensive Data Architecture: Complete backend API redesign for real analytics
- Enhanced /api/admin/dashboard endpoint with proper data structures for professional charts
- Real-time metrics: user registrations with trend data, daily revenue with profit calculations
- Trading activity tracking with volume and transaction count analytics
- System monitoring with service status and performance metrics
- Proper TypeScript interfaces and error handling throughout the data pipeline
User Management System - Block/Unblock Functionality
- Comprehensive User Blocking System: Implemented professional user account blocking/unblocking functionality with admin controls
- Added user block/unblock actions in dropdown menu with proper permissions
- Created temporary and permanent blocking options with reason selection and duration controls
- Implemented user block history tracking with admin information and timestamps
- Added automated unblocking system with cron job for expired temporary blocks
- User Block Management Interface: Enhanced admin user management with comprehensive blocking controls
- Block dialog with temporary/permanent options, reason selection, and duration picker
- Professional block status display in expandable user details with remaining time countdown
- Complete block history with reason, duration, blocking admin, and expiration information
- Real-time status updates showing active blocks with time remaining
- Automated Block Expiration System: Implemented background processing for temporary blocks
- Cron job running every 15 minutes to check for expired temporary blocks
- Automatic user reactivation when temporary blocks expire
- Comprehensive logging and error handling for block expiration processing
- Multiple block support with proper status management
- DataTable Performance Optimization: Fixed critical performance issues with modal interactions
- Resolved unnecessary data refetching when opening/closing block modal
- Optimized function memoization to prevent DataTable reinitialization
- Separated tableConfig updates from full DataTable resets
- Enhanced component stability with proper dependency management
- User Data Enhancement: Expanded user profile display with comprehensive information
- Added block status column with detailed block information in expandable rows
- Enhanced user profile rendering with social media links, location data, and bio information
- Improved user relationship data including wallet counts, transaction counts, and balances
- Professional status badges and icons for quick visual assessment
- React Performance & Stability: Fixed all rendering issues and performance bottlenecks
- Resolved React Hooks order violations by moving all hooks before conditional returns
- Implemented proper memoization with useMemo and useCallback for chart data and functions
- Eliminated infinite re-render loops through professional component architecture
- Enhanced error boundaries and loading states for better user experience
- Complete Chart Data System: Implemented proper time series data generation for continuous charts
- Date Range Generation: Creates complete date ranges instead of scattered data points
- Yearly View: 12 monthly data points from start to end of current year
- Monthly View: 4 weekly data points for better UI responsiveness and readability
- Weekly View: 7 daily data points for current week analysis
- Timeframe Selector: Interactive dropdown to switch between yearly/monthly/weekly views
- Continuous Charts: No more gaps or missing data points in chart visualization
- Proper Aggregation: Backend intelligently groups data by appropriate time intervals
- Fallback Data: Complete date ranges even when no actual data exists for smooth chart rendering
- Zero-Line Charts: Charts always display data even with no records, showing zero lines for clear visual feedback
- Responsive Design: Monthly view optimized with 4 weekly points instead of 30 daily points for better performance
User Management System Complete Overhaul
- Comprehensive User Data Display: Transformed the basic user table into a professional management interface
- Enhanced columns with complete user profile information including contact details, security status, and financial data
- Added expandedOnly fields for sensitive information that appears only in detailed view
- Comprehensive user details including phone numbers, wallet addresses, KYC status, and notification preferences
- Professional field organization with clear separation between basic and detailed information
- Real-Time USD Balance Calculation: Implemented accurate financial overview with real currency conversion
- Added total balance calculation across all user wallets (FIAT, SPOT, ECO) converted to USD
- Uses existing currency conversion utilities (getFiatPriceInUSD, getSpotPriceInUSD, getEcoPriceInUSD)
- Real-time exchange rate integration for accurate balance display
- Error-resilient calculation that continues working even if individual wallet conversions fail
- Enhanced Security Monitoring: Added comprehensive security and authentication tracking
- Failed login attempts counter with color-coded warning badges (3+ attempts yellow, 5+ red)
- Last failed login timestamp display with "Never" fallback for clean accounts
- Two-factor authentication status with enable/disable badges
- Wallet provider tracking (MetaMask, WalletConnect, etc.) with "Not Connected" fallback
- Smart KYC Integration: Conditional KYC display based on system availability
- KYC status badges with color coding (Approved=green, Pending=yellow, Rejected=red)
- KYC level display with "Not Assigned" fallback
- KYC review date formatting with "Not Reviewed" for pending applications
- Shows "KYC Disabled" when the KYC system is not enabled instead of showing null values
- User-Friendly Data Formatting: Eliminated all null/undefined display issues
- Phone numbers show "Not Provided" instead of null
- Wallet addresses display "Not Connected" instead of undefined
- 2FA type shows "Not Enabled" when disabled, defaults to "TOTP" when enabled
- Notification preferences display as Yes/No badges instead of boolean values
- Profile data parsing with structured display instead of raw JSON
- Custom Profile Renderer: Professional display of user profile information
- Bio Section: Clean paragraph formatting for user biography
- Location Display: Structured address with icons (
address,
city/country/zip)
- Social Media Links: Interactive badges with clickable links for all platforms (Facebook, Twitter, Instagram, GitHub, etc.)
- Smart URL Handling: Auto-detects and formats social media URLs properly
- Fallback Display: Shows "No additional profile data" instead of null when empty
- Enhanced Data Relationships: Complete user ecosystem view
- Wallet count display showing number of user wallets
- Transaction count showing user activity level
- Support ticket and notification relationship data
- Comprehensive user history with creation, update, and deletion timestamps
- Professional UI Components: Consistent design language throughout
- Color-coded status badges for quick visual assessment
- Proper icon usage for different data types (phone, email, wallet, security)
- Responsive layout with expandedOnly fields for optimal space usage
- Loading states and error handling for all data operations
- Backend API Enhancements: Robust data delivery system
- Enhanced user listing API (/api/admin/crm/user) with comprehensive related data
- Individual user detail API with complete profile information
- Proper TypeScript type handling for Sequelize Model vs plain object compatibility
- Error-resilient data processing with graceful fallbacks
Database Optimization
- MySQL Index Optimization: Fixed "Too many keys specified" database sync errors
- Reduced excessive indexes in ICO token detail model
- Optimized index configuration to stay within MySQL's 64-key limit
- Improved database sync performance and reliability
- TypeScript Compilation: Fixed model property access type errors
- Proper casting of Sequelize model instances for cache operations
- Enhanced type safety in KYC-related database operations
Binary Trading System Fixes
- Market Symbol Display: Fixed binary trading header showing double slashes (BTC//USDT) instead of correct format (BTC/USDT)
- Removed hardcoded commonQuotes array and symbol splitting logic
- Updated extract functions to use actual market data with currency and pair fields
- Fixed price and change data not displaying due to incorrect symbol format
- Market data now uses the provided structure directly: {currency: "BTC", pair: "USDT", label: "BTC/USDT", symbol: "BTC/USDT"}
- Duration System Consistency: Fixed binary duration model documentation and admin interface
- Corrected model comments to indicate durations are stored in minutes, not seconds
- Updated admin interface to display "Duration (minutes)" instead of "Duration (seconds)"
- Fixed validation messages to reference minutes instead of seconds
- Verified frontend and backend correctly handle minute-based durations throughout the system
- Initial Page Loading: Fixed binary page showing slate/gray colors instead of zinc theme colors
- Added immediate body background color setting to prevent flash of wrong colors
- Updated loading states to use consistent zinc-950 background
- Eliminated flash of unstyled content (FOUC) on binary page initialization
Database Model Documentation
- Comprehensive Field Comments: Added descriptive comments to all backend Sequelize models for improved code maintainability
- Investment Models (4 files): investment records, plans, durations, and plan-duration relationships
- KYC Models (4 files): applications, levels, verification services, and verification results
- Blog Models (6 files): authors, posts, comments, categories, tags, and post-tag relationships
- Content Models (2 files): pages with SEO and builder support, slider images
- Over 280+ field comments added explaining purpose, usage, and business context
- Self-documenting models reduce need for external documentation and improve developer onboarding
Enhanced
Cache Management
- Redis Integration: Improved Redis cache management for user profiles
- Better error handling for cache operations
- Non-blocking cache failures to prevent request failures
- Enhanced logging for cache-related operations
KYC Workflow
- Real-time Updates: KYC approval workflow now provides instant user experience
- No more delays between admin approval and user feature access
- Seamless integration between manual and automated approval processes
- Improved user satisfaction with immediate access to approved features
Framework Updates
- Next.js Upgrade: Updated Next.js from v15.3.5 to v15.4.2
- Enhanced performance and stability improvements
- Updated ESLint configuration to latest version
- Improved Turbopack configuration for better Windows compatibility
- Added fallback development mode for systems with Turbopack path issues
- Next.js 16 Preview Features: Enabled experimental features for enhanced developer experience
- Browser debugging logs forwarded to terminal for easier troubleshooting
- Enhanced client-side routing with smarter prefetching and cache management
- Improved 404 page handling with global-not-found support
- Advanced DevTools integration for route inspection and debugging
- React Key Errors: Fixed duplicate React key warnings on home page
- Updated feature mapping to use unique keys combining index and title
- Enhanced admin editors to generate unique feature titles automatically
- Improved component stability and eliminated console warnings
Fixed
CRITICAL FIXES
- KuCoin SPOT Deposit Address Generation: Fixed critical issue where SPOT wallet deposit addresses were returning empty objects {} for KuCoin exchange
- Root cause: KuCoin API expects network IDs (e.g., ERC20) directly rather than blockchain names (e.g., eth)
- Enhanced network mapping system to correctly handle KuCoin's specific network ID requirements
- Added comprehensive fallback system with multiple CCXT methods for deposit address generation
- Implemented intelligent network validation using KuCoin's currency network structure
SPOT Wallet Error Handling
- Error Message Context Fixing: Fixed incorrect error messages showing ECO wallet errors for SPOT wallet operations
- SPOT deposits no longer show "All custodial wallets are currently in use" error (ECO-specific)
- Added wallet-type-specific error handling for better user experience
- Enhanced frontend error detection to properly differentiate between wallet types
Deposit Interface Improvements
- Wallet Type Grid Layout: Fixed deposit form layout to display maximum 3 columns instead of 4 for wallet type selection
- Updated grid layout from lg:grid-cols-4 to lg:grid-cols-3 to match available wallet types (Fiat, Spot, Eco)
- Improved visual balance and spacing for wallet type selection interface
Enhanced
Exchange Integration Reliability
- Multi-Method Fallback System: Enhanced KuCoin deposit address generation with comprehensive method fallback
- Tries multiple CCXT methods (fetchDepositAddressesByNetwork, createDepositAddress, fetchDepositAddress) with graceful degradation
- Improved success rate for deposit address generation across different exchange configurations
Network Mapping Intelligence
--- *This release resolves critical KuCoin integration issues affecting SPOT wallet deposit address generation, ensuring reliable deposit functionality across all supported exchanges and wallet types.*
- Dynamic Network Detection: Enhanced network mapping to dynamically detect available networks from exchange API
- Automatic validation of chain names against exchange-supported networks
- Intelligent fallback mappings for common blockchain-to-token-standard conversions
Fixed
- Investment plan creation/editing now properly supports duration selection through multiselect dropdown
- DataTable modal cancel button no longer causes page to become unresponsive
- Multiselect component displaying "undefined, undefined" for investment plan durations
- Number input fields in DataTable modals having inconsistent padding styling
- Backend investment plan endpoints now handle both legacy and new duration data formats
- KYC application submission now redirects to correct application page using applicationId instead of levelId
- KYC application submission error handling now properly displays error messages to users
- KYC levels JSON parsing now has proper error handling to prevent crashes from malformed data
- KYC admin application search filter now properly handles null/undefined values with optional chaining
- KYC backend number validation now properly converts string numbers to numeric values
- KYC phone number validation regex now allows dots (.) in phone numbers
- KYC admin application drawer state now properly resets when opening new applications
- KYC application status updates now prevent race conditions with proper loading state management
- KYC admin image viewer now supports ESC key to close and handles image load errors gracefully
- Trading orderbook now shows multiple orders instead of single aggregated order per price level
- Trading orderbook default limit increased from 15 to 50 orders per side
- Trading orderbook aggregation level changed from 0.1 to 0.01 for more granular price display
- Trading orderbook WebSocket handler now properly handles and limits orderbook data
- Finance deposit page React error #31 "Objects are not valid as a React child" causing page crashes
- Finance deposit store JSON parsing errors now properly handle malformed data with fallback values
- Finance deposit methods rendering now includes comprehensive object safety checks
- Finance deposit network display functions now include proper error handling and type checking
- SPOT deposit transaction hash input field missing from deposit flow
- SPOT deposit countdown timer not working properly due to hardcoded display
- SPOT deposit monitoring step missing after transaction hash submission
- SPOT deposit step progression not advancing to monitoring screen
Added
- SPOT deposit transaction hash input field with comprehensive validation and instructions
- SPOT deposit monitoring step (step 5) showing transaction verification progress
- SPOT deposit countdown timer functionality with proper start time initialization
- Duration selection functionality to investment plan creation and editing forms
- Proper data transformation for investment duration objects in multiselect components
- Support for API-based multiselect options with proper label formatting
- Enhanced investment plan form with searchable duration multiselect dropdown
Enhanced
- Investment plan admin interface now allows linking multiple durations to plans
- DataTable cancel button properly handles unsaved changes with confirmation dialog
- Multiselect component correctly formats duration display as "1 WEEK", "1 DAY", etc.
- Investment duration menu terminology changed from "Investment Terms" to "Investment Durations"
- Form validation and data processing for investment plan duration relationships
- DataTable drawer form state management improved for better user experience
- KYC admin application search now includes lastName in search results
- KYC admin drawer state management improved with proper cleanup and initialization
Removed
- Hardcoded padding-left styling from number input fields in DataTable forms
- DrawerClose component usage that bypassed proper modal close handling
- Introducing Our Premier Trading Platform: A Convergence of Innovation and Excellence
- Market Leader in Trading Platforms: Recognized as the Rank 1 Best Selling and Most Highly-Rated (5-Star) Trading Platform.
- Peak Performance Platform: Acclaimed as the Rank 1 Best Performing Platform with a robust backend framework. Benchmark
- Advanced Next.js Frontend: Harnessing the power of Next.js for a cutting-edge frontend experience.
- Elite Trading Interface: Offering a top-end trading page, optimized for user engagement and performance.
- Adaptive Trading Page: A fully collapsible trading page that adjusts seamlessly across devices.
- Device-Responsive Design: Ensures a fluid experience on all devices with tailored layouts.
- Fully Tailored User Experience: Customize the frontend to your exact specifications, including global site themes, sidebars, shades, and colors.
- SEO-Optimized Whitelabel Solution: Fully customizable for brand alignment with built-in SEO enhancements.
- Dynamic SVG Animations: Elevate user interaction with fully animated SVGs, enhancing the platform’s interactivity.
- Automated Liquidity Solutions: Seamless integration with major exchange providers like Binance and Kucoin, alongside native exchange and blockchain integration using an ecosystem addon.
- Innovative Binary Trading System: Offering a cutting-edge binary trading experience.
- Native Charting Library: A comprehensive set of drawing tools and indicators for precise market analysis.
- Real-Time Orderbook: Stay updated with a live orderbook feature.
- Comprehensive User Management: A robust system for managing users, roles, and permissions.
- Fully Customizable KYC Templates: Adapt the KYC process with customizable templates and multiple levels.
- Comprehensive KYC System: A reliable and efficient Know Your Customer system.
- Expansive Extension Library: A vast array of extensions available, continuously expanding the platform’s capabilities.
- Unparalleled Platform Customization: Tailor every aspect of the site for a unique user experience.
- Versatile Wallet Management: Customize wallets with balance adjustment capabilities.
- Comprehensive Fiat Wallet System: A dedicated system for managing fiat wallets.
- Built-in Cron Manager: All backend crons are efficiently managed and executed upon deployment.
- Effortless Installation: Benefit from an automated installation script for straightforward setup.
- One-Click Live Updater: Keep the platform updated effortlessly with a single click.
- Integrated Mailing and Notification Systems: Efficient communication channels for user engagement.
- Enhanced Security: Robust 2nd-factor authentication system using SMS or app authenticators.
- Multilingual Capability with Auto-Translation: Break language barriers with an automated translator.
- Real-Time Support: Live support with an in-built websocket, independent of third-party services.
- Efficient Live Ticketing System: Streamline customer support with a live ticketing system.
- Dynamic Blogging Feature: A fully-functional blog system to engage and inform users.
- High-Yield Investment Program (HYIP) System: A platform for managing high-yield investments.
- Advanced Admin Management and Analytics: Comprehensive tools for platform administration and analytics.
- Exchange Integration Wizard: Easily connect with providers like Binance for orderbook integration.
- Fiat Currency Management Tools: Manage fiat currencies effectively.
- Dual Mode Interface: Choose between dark and light modes for user preference.
- Extensive API Documentation with Testing Functionality: Comprehensive API documentation, complete with integrated testing features for streamlined development and troubleshooting.
- Robust Security Framework: Advanced security measures including CSRF protection, and a sophisticated token system with token refreshing and expiration functionalities, ensuring top-notch security and user data protection.
- V5 Backend Features
- MashServer Framework: Built on top of uws20 for superior performance and scalability.
- Advanced Logger: Featuring categories, levels, and color-coded logs in a fully readable and filterable format.
- Swagger Documentation: New generator and parser for comprehensive API documentation.
- Validation Gate: Ensures secure handling of body, params, and queries with sanitization.
- Automatic Route Generator: Creates GET, POST, PUT, DELETE routes from API structures.
- Request Parsers: Conform to Swagger parameters and body configurations.
- Roles Manager: Efficient role management with caching.
- CLI Deployment Loader: Displays task durations for better deployment insights.
- Sequelize ORM: Complete database rework for proper naming conventions and performance.
- UUID Implementation: Transitioned all IDs to UUIDv4 for consistency.
- Lazy Loading Routes: Reduces server deployment times significantly.
- Middlewares: Enhanced authentication and rate limiting mechanisms.
- Authentication System: Session and cookie-based authentication for improved security.
- Edge Server: Live token validation on the frontend for enhanced security.
- JWT Management: Using JOSE for robust JWT generation and verification.
- Redis for Tokens: Faster and more efficient authentication processes.
- WebSocket Generator: Subscriptions and message handling for real-time communication.
- WebSocket Authentication: Token refreshing on WebSocket sessions.
- Database Singleton: Singleton instance for Sequelize to boost performance and enable live database syncing.
- Validation Module: Robust validation rules and pretty error message generation with avj.
- Live Notifications: Real-time notifications via WebSocket from API endpoints.
- Support and Admin Notifications: New notifier system for better communication.
- SQL to JSON Parsing: Simplifies migrations with efficient parsing.
- Migration Module: Facilitates seamless transition from v3 to v4, relinking relations and converting IDs to UUIDs.
- Task Manager: Efficient throttling with a new task manager.
- Token Generators: New methods for generating tokens.
- Online User Identification: Admins can identify online users using a WebSocket central system.
- Swagger Schema Generators: Automatically generate schemas for Swagger documentation.
- Data Handling Enhancements: Improved filtering, pagination, and sorting across all models and queries.
- Nested Filtering: Support for filtering and sorting by nested content.
- Paranoid System: Restore or permanently delete records with an initial trash system.
- Comprehensive Bulk Operations: Handlers for bulk status updates, deletions, and restorations.
- Token Regeneration: 14-day refresh token validity from session ID.
- Wallet System Overhaul: Addresses for deposits and withdrawals requested on demand.
- Deposit and Withdrawal Handlers: Comprehensive handling for various wallet types, including FIAT, SPOT, and ECO.
- Payment Gateways: Support for PayPal and Stripe for live deposit validation.
- Funds Transfer Logic: Seamless transfer of funds between all wallet types.
- Binary Trading Logic: Real-time validation with a WebSocket endpoint.
- Market Management: Admins can import and enable markets with new logic.
- Cron System: Efficient task automation with a new cron system.
- Authentication Systems: Live reCAPTCHA v3 validation and Google authentication.
- Wallet Authentication: SIWE (Sign-In with Ethereum) integration.
- Registration Logic: Email verification required for access.
- Email OTP Template: New reset template for email OTPs.
- Admin Analysis Manager: Comprehensive analysis tools for various models.
- Database Backup/Restore: New modules for efficient database management.
- Log Monitor: Enhanced logging with filtering, pagination, and sorting.
- Notification and Management Enhancements: Live updates and management for notifications and user records.
- Exchange Provider Testing: New module for testing exchange providers.
- Provider Balance Check: Endpoints for checking balances on provider sites.
- Fee Calculator: Efficient calculation of collectable fees.
- i18n Wrapper: Auto-converts strings for translation with necessary imports and definitions.
- Shared Types: Consistent types shared between backend and frontend.
- i18n Handler: Supports 64 locales with different fonts.
- Data Table: Comprehensive handling of data tables with live updates and multi-field filtering.
- Notification and Announcement Panels: Live-updating panels for notifications and announcements.
- UI Enhancements: Improved UI with guest, user, and admin menus.
- Live Search: Menu and collapsible item search for better navigation.
- Layouts: New sidebar, floating sidebar, and navigation bar layouts.
- Locale Storage: Locale preferences stored in localStorage and cookies.
- Page Management Rules: Per-page management rules for better control.
- Analytics Support: Integration with Google Analytics and Facebook Pixel.
- Trading Page Updates: Improved layout with dark/light mode support and real-time updates.
- Markets Card: Displays tickers for both provider and ecosystem markets.
- Custom Charting Library: Enhanced integration with the new layout.
- WebSocket Ecosystem: Endpoints for charts, order books, tickers, trades, and live order updates.
- Binary Trading: New page with live order previews and a comprehensive dashboard.
- Wallet Management: New page for managing wallets with deposit, withdraw, and transfer wizards.
- Dashboards: New dashboards for staking, forex, MLM, and ecommerce.
- Blog System: Dynamic and responsive blog system with a new comment system.
- Investment Pages: Comprehensive management and analysis tools for ICO investments, forex, and general investments.
- Support Page: New page with a live WebSocket endpoint for user support.
- System Health Check: Comprehensive health check with error reports for the admin dashboard.
- Media Monitor: New media monitor with deletion capabilities.
- Uploads Modifier: Controls image sizes and converts them to WebP for optimal performance.
- Live Migration Monitoring: WebSocket endpoint for live migration monitoring of record changes.
- Settings Page: Live updates for the settings page.
- KYC Control: New KYC control and template rendering in the user profile page.
- 2FA Control: Enhanced control of 2FA in the user profile page.
- Menu Switcher: Seamless switching between user and admin menus.do actions in the live page builder.
Changelog not found