Skip to content

v0.1.1

Choose a tag to compare

@rsaer rsaer released this 24 May 13:03
· 108 commits to master since this release

This release contains hardening and reliability improvements for CommerceBackend:

  • Database Constraints & Indexing: Added PostgreSQL CHECK constraints for pricing, quantity, and amount fields to prevent corrupt values. Added index optimization on key fields like agent IDs, stripe checkout session IDs, and status columns for performant queries.
  • Idempotent Payments: Enabled idempotency key support in Stripe checkout session creation to avoid double charges.
  • Timing Attack Mitigation: Added timingSafeCompare utility for API key authorization checks to prevent timing attacks.
  • Schema & API Enhancements: Allow free listings with priceAmount of 0. Enhanced catalog search filters with support for offsets and updated default search limits. Added payment_inventory_conflict status to handle checkout issues gracefully when stock is unavailable.