Changelog

Platform default tokens

Super admins can now designate BEP-20 tokens as platform defaults. USDT is included out of the box and visible to all users automatically.

Reveal API key anytime

API keys are now stored with AES-256-GCM encryption. Users can reveal their full key at any time from the dashboard — not just at creation.

Admin token management page

New admin page at /admin/tokens with toggle controls to promote user tokens to platform defaults.

Fixed ERR_CONTENT_LENGTH_MISMATCH

Root cause was response helper passing string message as HTTP status code. Fixed across all API endpoints.

Payment session API

Create, status-check, and cancel payment sessions. Each session generates a unique ephemeral BSC wallet.

QR code generation

Payment sessions return a base64-encoded QR code PNG for display in your UI.

Wallet Monitor cron job

BSC blockchain scanner runs every 30 seconds to detect incoming token transfers to ephemeral wallets.

Automatic token forwarding

Once payment is detected, the system auto-floats BNB gas and forwards tokens to your merchant wallet.

Full admin panel

Super admin dashboard at /admin with user management, package management, and activity logs.

User dashboard

Dashboard at /dashboard for managing API keys, domains, tokens, and viewing activity.

API key management

Create, list, and revoke API keys. SHA-256 hash for validation, prefix-based identification.

Domain whitelisting

CORS enforcement at middleware level. Only requests from whitelisted origins are accepted.

Custom BEP-20 token registration

Register any BEP-20 contract. Name, symbol, and decimals auto-detected from the blockchain.

Rate limiting & activity logging

Per-key rate limiting with monthly quota tracking. All API calls logged with response time and status.