Bug Fixes
New Features
- Fixed server creation failing with deploy.locations must be an array
- Fixed getServer returning 404 by using external_id (service ID) instead of server identifier
- Fixed missing EmailTemplate class by migrating to Paymenter’s SystemMail for security emails
- Fixed cache not working in getServer for non-raw calls
Improvements
- Multi-API key support (comma-separated keys with automatic failover)
- Per-key rate limiting (240 RPM tracked per key)
- Smart key rotation on 429, 401, and 403 responses only
- Added external_id to verbose server creation logs
- Security emails now logged in Admin - Mail Log
- Debug logs now show which API key is used (for example: Key #0: ptla_...)
- Server Status "Installing" Bug: Fixed an issue where servers attempting to fetch resources while installing would throw a 409 error and break the overview page. The system now gracefully handles this and displays "Installing" or the correct status.
- Mobile Responsiveness: Fixed layout issues on the Overview, Credentials, and Password Generated pages for smaller screens.
- Added custom description when a server is provisioned
- Fixed Auto Login so it now follows the panel-issued redirect URL instead of falling back to the plain server page; also normalized/polished URL handling and returned proper HTTP redirects.
- Preferred human-friendly allocation aliases (e.g., tempnode.otcs.fun) anywhere
host:portinformation is shown, trimming blanks and only falling back to the raw IP when no alias exists.
Power & Control
- New Client server overview section:
Security & Logging
- Safer Auto-Login
- Password Action Logs:
- Admin Safeguards
Backend & Support Tools
- New Admin Tools:
- Added a separate “Reveal Password” tab.
- Added a confirmation prompt when clicking “Generate Password.”
- Added automatic password hiding after a period of inactivity.
- Added email notifications for actions such as password reveal, password generation, and auto-login.
