Project Changelog (v0.2.1)

[0.2.1] - 2026-10-17

URL Query Parameter API Key Support (?apikey=...): Auth middleware now accepts API keys passed via query parameters (?apikey=, ?api_key=, ?apiKey=, ?key=) in addition to X-API-Key and Authorization: Bearer headers, ensuring batch lookups with ?apikey=sq_live_... bypass the public IP rate limit.

SquareComp Striker Font & Global Header: Added /assets/Striker.woff2, /assets/Striker.woff, and /assets/img/favicon-32x32.png to match SQUARECOMP_GLOBAL_HEADER.md across all pages.
Dedicated Login & Registration Portal (/login): Added Email + Password customer registration & sign-in alongside Admin Pocket-ID OIDC SSO.
Dedicated User & Admin Dashboard (/dashboard): Automatic redirect after login/SSO with zero page refresh required, featuring tabs for My API Keys, Live API Logs, and Admin Control Panel.
Named API Keys & Decoupled Sessions: Create multiple named API keys (e.g. SQPDS.com) without entering an email address, while web logins use non-destructive sq_sess_... session tokens.

Added official SquareComp SVG & ICO favicon assets to the application.
Linked favicons across web interface and changelog pages (`favicon.svg`, `favicon.ico`).

Dynamic WHOIS server resolution via IANA query lookup for ccTLDs (`.co`, `.ai`, `.so`, `.ca`, `.ru`, `.it`, `.is`, `.in`).
Expanded RDAP `eventAction` expiration date matching for registrar & registry expiration events.
Enhanced Port 43 WHOIS text parsing for multi-format dates (`DD-MMM-YYYY`, `YYYY.MM.DD`, `MMM DD YYYY`) and registrar extraction.

Expanded `api_keys.status` MySQL ENUM column to include `'revoked'` alongside `'active'`, `'canceled'`, and `'suspended'`.
Fixed `Data truncated for column 'status'` database error during SSO authentication.

Resolved Pocket-ID SSO login loop caused by truncated 8-character `key_prefix` redirects.
Ensured SSO login callbacks and customer email logins issue complete, active `sq_live_...` API keys for dashboard authentication.

Sanitized `rawRdap` payload outputs by removing multi-page legal notices and Terms of Service boilerplate text disclaimers from RDAP API responses.
Streamlined available domain (HTTP 404) `rawRdap` objects to concise `{ errorCode: 404, title: "Object not found" }`.

Multi-proxy pool round-robin rotation (`PROXY_LIST`) and automatic failover for RDAP HTTP & WHOIS Port 43 socket connections.
MySQL 12-hour TTL caching for available/unregistered domains (`status: ["AVAILABLE"]`).
Active cache hit evaluation for all non-expired domain records (`cachedUntil > now`).

Replaced all native browser `alert()` and `confirm()` popups with a floating glassmorphic Toast notification system (`showToast`).
Cleaned up homepage hero section and header styling for high-contrast "Log In" button.
Customer email login and instant API key reset endpoints (`POST /api/auth/customer-login`, `POST /api/auth/reset-key`).

Interactive Login Modal separating Customer Dashboard API Access from Admin Pocket-ID SSO.
Fixed OIDC `invalid_state` OAuth error by providing a 32-character high-entropy `state` parameter in Pocket-ID authorization requests.
Added styled HTML error page handling for OIDC callback failures.

SOCKS5 proxy failover for RDAP & WHOIS socket queries when blocked by Cloudflare Error 1015.
Explicit detection and parsing of HTTP 404 / unavailable domains (`craves.pizza`) displaying green AVAILABLE FOR REGISTRATION badge.
Background pre-fetch daemon (`npm run sync:sqpds`) connecting to `sqhome_pds.tracked_domains`.
Fixed Pocket-ID OIDC SSO client ID environment variable loading (`OIDC_CLIENT_ID`).
Updated UI navigation header button to "Log In".

Pocket-ID OIDC SSO authentication integration (`https://sso.squarecomp.uk`).
Admin Management Control Panel (`/api/admin/keys`) for key administration & generation.
Customer API Account Dashboard (`/api/user/key-info`) with query volume and key prefix.
Self-service API Key Rotation (`POST /api/auth/rotate-key`).
Developer API Integration Guide section with cURL, Node.js, Linux CLI, and Python snippets.
Scoped User Privacy for `/api/logs` endpoint (users see only their own logs).
Updated Stripe Checkout pricing to £15.00 GBP per month.