Skip to content

v0.5.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Aug 18:11
· 9 commits to master since this release
v0.5.0
6cf68d9

Overview

This release introduces secure API key authentication and the first version of SaaSKit's event infrastructure.

With this update, applications can authenticate programmatic access, manage tenant-scoped API credentials, and subscribe to platform events through webhooks.

Highlights

🔑 API Keys

Added support for:

  • Secure API key creation and management
  • Tenant-scoped credentials
  • Key prefixes (sk_live_, sk_test_)
  • SHA-256 hashed storage
  • Scope-based permissions
  • Expiration and revocation
  • API key authentication middleware

🔔 Webhooks

Added webhook capabilities:

  • Event subscriptions
  • Event filtering
  • Delivery tracking
  • HMAC-SHA256 signed payloads
  • Automatic retries with exponential backoff

📡 Event System

Introduced the first SaaSKit event schema:

  • User lifecycle events
  • Tenant lifecycle events
  • API key events
  • Session events

Developers can now build integrations around SaaSKit events using a consistent and documented format.

Security Improvements

  • API secrets are never stored in plaintext
  • Webhook requests can be verified cryptographically
  • Tenant isolation is enforced throughout API key handling
  • Fine-grained API access control through scopes

Documentation

Added documentation for:

  • Event payload formats
  • Webhook verification
  • Integration guidelines
  • Consumer best practices

Developer Experience

This release provides the foundation for:

  • Backend integrations
  • Automation workflows
  • External service synchronization
  • Future SDK support

What's Next

Upcoming phases will focus on:

  • Developer SDKs
  • Audit logging
  • Advanced platform operations
  • Marketplace and extension ecosystem

Thank you to everyone following SaaSKit's development. 🚀

Assets 10
Loading