API Changelog

IP Whitelist Security

All users must have allowed_ips configured to access the API. Without at least one IP address, users will be blocked from authentication.

Single Login Enforcement

Only one active session per user. When a new login occurs from another device/location, the existing session will be automatically disconnected.

WebSocket IP Validation

WebSocket connections now validate the client's IP against the user's whitelist. Connections from non-whitelisted IPs are rejected.

Refresh Token Support

Login endpoint now returns both access_token and refresh_token. Use the refresh token to obtain new access tokens without re-authenticating.

Testing Endpoints

New testing endpoints added that bypass IP whitelist restrictions for development and testing purposes:

• • POST /v1/testing/login - Test login without IP validation
• • GET /v1/testing/ws-status - Get WebSocket server status
• • POST /v1/testing/instruments - Get mock instruments
• • POST /v1/testing/ws-subscribe - Test WebSocket subscription

Dashboard Health Check

New endpoint GET /v1/dashboard/health provides real-time status of all system components including API server, WebSocket server, database, SMTP service, and Zerodha API.

Authentication Endpoints

Complete authentication flow including login, logout, password reset, and token refresh.

User Management CRUD

Full user management with role-based access control (admin, manager, user), subscription management, and API key generation.

Instrument Management CRUD

Complete instrument management with support for equities, futures, options across multiple exchanges (NSE, BSE, NFO, MCX, CDS).

Dashboard Statistics

Real-time dashboard with connected users, expiring subscriptions, revenue tracking, and connection quality statistics.

Settings Management

Configure SMTP settings for emails and Zerodha API credentials for trading integration.

WebSocket Support

Real-time market data streaming via WebSocket with support for LTP, quote, and full market depth modes.