Square POS & Zapier integrations, Mobile Money reload & Scanner State Machine
Passinstance v1.5.0 expands our omnichannel wallet ecosystem with native point-of-sale integrations, multi-channel Mobile Money payment flows, automated delivery campaigns, enterprise SAML SSO, and a robust offline-first mobile scanning engine.
Features
7- Square POS & Third-Party Connectors: Native Point of Sale integration with real-time OAuth token lifecycle, webhook receipt processing, and live checkout barcode validation.
- Official Zapier Platform Integration: Automated pass issuance, balance updates, member notifications, and pass lifecycle triggers across 6,000+ apps.
- MTN Mobile Money & Multi-Channel Prepaid Reload: Ingest Mobile Money payments with localized carrier prefix routing and public self-service card balance reload flows.
- Enterprise SAML 2.0 SSO & Signup Risk Engine: Single Sign-On with strict IdP enforcement, combined with automated disposable-email screening, domain verification, and signup anomaly detection.
- Automated Delivery Center & Sendout Wizard: Multi-step campaign wizard supporting audience segmentation, custom AWS SES email presets, and real-time execution tracking.
- Scanner State Machine & Hardware NFC Support: Event-driven scanner engine with offline dataset caching, hardware NFC tap-to-redeem, and full Italian and Portuguese localizations.
- Official Client SDKs: Fully typed, tested client libraries for Node.js/TypeScript, Python, and PHP with built-in idempotency headers.
Improvements
5- Database Performance & Tenant Indexing: Added GIN metadata indexes, payment status indexes, and unique barcode deduplication constraints.
- Resilient Outbox & Job Queue Architecture: Atomic PostgreSQL row claims prevent worker race conditions, paired with automatic recovery for interrupted jobs.
- Centralized Timezone Resolution: Multi-timezone customer scheduling adhering to strict backend time invariants.
- Scanner Telemetry & Device Auditing: Periodic session liveness heartbeats and client metadata tracking for compliance and operational monitoring.
- Unified Design System & UI Consistency: Refreshed design tokens, smooth animated splash screens, and strictly typed component styling across Dashboard and Scanner.
Bugfixes
6- Secured admin queue endpoints and eliminated unauthenticated public wallet registration analytics.
- Patched API key cookie bypass vulnerabilities and hardened tenant middleware isolation.
- Resolved Google Wallet callback nonce race conditions using atomic job deduplication.
- Enforced strict API host allowlists in mobile scanner QR links to block unauthorized redirect vectors.
- Migrated scanner credentials from insecure storage to encrypted platform hardware keystores (SecureStore).
- Fixed public pass flow error key mismatches and cache invalidation after template updates.