Skip to content
Lizen

Changelog

All notable changes to the Lizen API and dashboard are documented here. Dates are UTC.

September 2026

Added — Custom auth system (Phase 21)

  • Email/password signup with PBKDF2-SHA256 hashing and email verification.
  • Session-based dashboard authentication (HttpOnly cookie, D1-backed).
  • Google OAuth sign-in via PKCE + JWKS verification.
  • Cloudflare Turnstile bot protection on signup and signin.
  • POST /auth/forgot-password, POST /auth/reset-password — 15-min single-use tokens.
  • GET /auth/sessions, DELETE /auth/sessions/:id — session listing and revocation.
  • First API key issued automatically after email verification (delayed issuance).

Added — Dashboard auth pages

  • Sign-up, sign-in, forgot password, and reset password pages in the dashboard.
  • Session-aware auth context — localStorage API key approach removed.

August 2026

Added — Phase 15: Monitoring & observability

  • Sentry error capture with 10% trace sampling.
  • GET /status endpoint for the public status page.
  • Status page at status.lizen.dev — auto-refresh, animated status indicator.

Added — Phase 16: Operator backend

  • Admin API: /admin/stats, /admin/accounts, /admin/audit, /admin/system.
  • Account suspension enforcement — suspended accounts receive 403 account_suspended on all /v1/* calls.
  • Payment webhook receiver — Paddle v3 and Lemon Squeezy signature verification.
  • 10 transactional email templates via Resend.
  • Trial lifecycle automation — 7-day and 1-day warnings, automatic expiry.

Added — Core API (Phases 1–14)

  • POST /v1/validate — edge-cached license key validation.
  • POST /v1/keys, GET /v1/keys, GET /v1/keys/:id — key management.
  • POST /v1/keys/:id/revoke, POST /v1/keys/:id/extend — key lifecycle.
  • POST /v1/products, GET /v1/products — product management.
  • POST /v1/offline/generate, POST /v1/offline/sync — offline activation.
  • /v1/webhooks — webhook configuration and delivery.
  • /v1/analytics/overview, /v1/analytics/activations, /v1/analytics/geography — analytics.
  • TypeScript SDK @lizen/sdk — ESM + CJS, zero runtime dependencies.
  • CI/CD pipeline — GitHub Actions, staging + production deploy.