Version 5.2.6

Release Date: January 17, 2025
Tags: RECAPTCHA SYSTEM, SECURITY ENHANCEMENTS, API FIXES, BUG FIXES, AUTHENTICATION IMPROVEMENTS

Added

Security Features

• Added action-specific tokens for login, register and password reset
• Added conditional reCAPTCHA, applied based on your configuration
• Added graceful fallback when reCAPTCHA fails or is disabled
• Added user-friendly messages when verification fails
• Added URL cleanup for authentication flows
• Added permission-based URL cleanup in the admin

System Enhancements

• Added handling of loading states so URL cleanup does not run too early
• Added robust handling of URL manipulation
• Added authentication state detection that accounts for permissions
• Added helpers for reCAPTCHA-enabled authentication flows

---

Changed

Security

• Changed all authentication endpoints to be protected by reCAPTCHA
• Changed login, registration and reset so automated attacks are prevented
• Changed tokens to be action-specific, which protects against replay
• Changed error handling so it does not disclose information

User Experience

• Changed admin URLs to be cleaned up automatically after a successful sign-in
• Changed the auth=false parameter so it no longer persists after login
• Changed navigation in the admin interface to be smoother
• Changed URLs to be consistent across all authenticated admin pages
• Changed the visual feedback shown during authentication state transitions

System Reliability

• Changed admin permission checking during authentication detection
• Changed the auth modal to clean up the URL after a successful login
• Changed validation of the reCAPTCHA settings to be comprehensive
• Changed error patterns to be standardized across the authentication screens
• Changed authentication flows to handle races properly

---

Fixed

reCAPTCHA System

• Fixed the "Recaptcha Token is required" error during authentication
• Fixed token generation on the login form when reCAPTCHA is enabled
• Fixed token generation on the registration form
• Fixed the missing reCAPTCHA protection on password reset
• Fixed the incorrect secret key setting name
• Fixed missing validation on the register and reset endpoints

Authentication Issues

• Fixed incorrect request imports that broke authentication on a number of screens
• Fixed deposits from the forex dashboard failing because of a missing token
• Fixed authentication flows breaking when reCAPTCHA is enabled
• Fixed the auth=false parameter persisting after login
• Fixed URL parameter confusion in the admin interface
• Fixed race conditions between middleware redirects and client-side URL cleanup

UI Consistency

• Fixed orderbook colour inconsistency in dark mode
• Fixed the dark mode colour scheme in recent trades
• Fixed the visual feedback shown between authentication states