Skip to content

The Dynamic Infrastructure Update

Choose a tag to compare

View all tags
@yash-pouranik yash-pouranik released this 07 Mar 19:30
· 1143 commits to main since this release
v0.2.0
058c311

Release v0.2.0 — The DX, Security & Infrastructure Revolution 🚀

Overview
Following our Genesis launch, we're taking urBackend to the next level. This massive platform update hands ultimate control over to developers through our new BYO (Bring Your Own) DB architecture, revolutionizes the Developer Experience (DX), and fortifies our security systems from the ground up.

✨ Key Features & Updates

1. Bring Your Own Database (BYOD) 🗄️

  • Your Database, Your Rules: Bypass our shared infrastructure. You can now seamlessly connect your own external MongoDB URI directly to your project.
  • Data Privacy: Your project's collections and dynamic schemas will be routed and stored entirely on your own external DB, keeping your users' data in your total control.

2. Dual API Keys & Granular RBAC 🔑

  • Publishable vs Secret: Completely replaced the single API key system. Projects now issue a Publishable Key (pk_live_) safe for frontends, and a Secret Key (sk_live_) for secure server-side operations.
  • Strict Guardrails: Data-destructive endpoints will now physically block requests if a Publishable key is used.

3. Fortified Infrastructure & Security 🔒

  • CORS Allowed Domains: Implemented strict Origin header validations. Your Publishable keys will automatically reject requests (403 Forbidden) originating from un-whitelisted domains, stopping quota theft.
  • Dynamic Auth Setup: Toggling Auth intelligently manages state and strictly blocks activation until a proper users collection is defined.
  • Brute-Force Protection: Added a designated authLimiter to prevent credential stuffing. JWTs now explicitly expire in 7 days, and OTP attempts are capped.
  • IDOR Patches: Comprehensive audit to fix Insecure Direct Object Reference vulnerabilities. Developers can only modify resources they strictly own.
  • Docker Hardening: Backend containers now run as non-root users, keeping internal database/cache ports completely isolated.

4. Advanced Dynamic Schemas & Query Engine v1 📦

  • Deep Nesting Support: Full schema support for Object (nested JSON structures), Array (lists), and Ref (relational linking between collections).
  • Advanced Querying: Added powerful filtering operators (_gt, _lt, _gte, _lte), sort=field:order indexing, and robust pagination logic (page/limit) to the core Data API.

5. Revamped Dashboard & Data Management 🪪

  • Dynamic User Forms: The Auth page automatically reads your custom users schema and generates native inputs (Text, Number, Boolean) for custom fields—replacing the legacy JSON editor.
  • Secure Admin Controls: Send secure OTPs, reset user passwords, and manage profiles directly from the admin dashboard without ever exposing password hashes to the frontend.
  • Database Redesign: Completely redesigned Database UI featuring a streamlined navigation sidebar, optimized record tables, and powerful Row Action drawers for complex objects/arrays.

6. Official GitBook Documentation & Brand Refresh 📖

  • GitBook Integration: We have completely migrated to a modular structure for our official docs. Check out the new guides at docs.urbackend.bitbros.in.
  • Docker Self-Hosting Engine: Added a robust docker-compose.yml to spin up the entire urBackend ecosystem locally or on a VPS in a single command.

🛠️ Noteworthy Bug Fixes

  • Double OTP Patch: Resolved an issue resulting in duplicate OTP emails during developer signups.
  • Cache Integrity: Fixed a Redis caching bug where raw Mongoose documents were corrupting application state and flags on page refreshes.
  • Analytics Stability: Implemented persistent database-backed global visit counters for accurate landing page analytics across server restarts.
  • Safe Resource Teardown: Safe Project Deletion now ensures external databases and storage buckets (Supabase) are securely ignored during project destruction.

What's Changed

Full Changelog: v0.1.0...v0.2.0

Contributors

tejaavula076, yash-pouranik, and 3 other contributors
Assets 2
Loading