Platform
80eight Platform (API) — v2.0.21
Trades that always settle, and a stronger foundation for secure sign-in.
A reliability-and-security release with no breaking changes for integrators: hardened trade execution that can't overspend or double-execute, plus the groundwork for more secure, native-app sign-in.
Stronger safeguards & security
- Trades that can't overspend. Orders to our liquidity layer are now slippage-bounded and attempted on a single assigned venue, so a transient error can never double-execute an order and a buy can never exceed the amount you requested.
- A more secure session model. Clients can now choose how their session token is delivered — browser-only secure cookies, or token-in-body for native apps that hold their own credentials — with native apps able to store a rotating refresh token in a secure device keychain.
- More predictable sign-in. An explicit email-and-password sign-in always authenticates with those credentials rather than a stale session, so you reliably get a fresh token back, with consistent error responses across the auth surface.
Under the hood
- Stronger admin tooling. New internal controls back multi-jurisdiction company settings, push-campaign broadcasts, per-pair fee and trade configuration, and admin reset of two-factor — all internal admin-console APIs, not part of the public contract.
(Every change in this release is additive — clients that send no new headers keep their exact current behaviour.)