v1.4.0

Features

• Adds SEP-10 Client Attribution support
  • Generates and verifies SEP-10 challenges including client domains
  • Adds the following environment variables:
    • SEP10_CLIENT_ATTRIBUTION_REQUIRED
    • SEP10_CLIENT_ATTRIBUTION_REQUEST_TIMEOUT
    • SEP10_CLIENT_ATTRIBUTION_ALLOWLIST
    • SEP10_CLIENT_ATTRIBUTION_DENYLIST
• Makes the expiration for SEP-24's interactive flow customizable using the INTERACTIVE_JWT_EXPIRATION environment variable
• Makes SEP-6 /deposit and /withdraw min_amount and max_amount response attributes optional and overridable
• Streams Stellar transactions from the beginning of each distribution account's history if no transactions are present for that account

Database Migrations

• Adds the client_domain column to the Transaction model, and is present if provided by the client in SEP-10

Bug Fixes

• The fee and total displayed in the SEP-24 interactive flow's "Amount" page updates correctly on high-speed input
  • Previously, adding or removing characters quickly could result in an incorrect fee and total displayed
• The amount input on the "Amount" page cannot be covered by the Asset symbol
  • Previously, a symbol longer than 4 characters would cover the amount inputed by a user

Breaking Changes

• Polaris now re-queries Transaction objects returned from DepositIntegration.poll_pending_deposits(). If you make changes to a Transaction instance without saving those changes to the database, those changes will now be lost. Update your poll_pending_deposits() implementation to save all changes to Transaction objects returned.