Back to release notes

v0.2.5-beta

Security, Tender Discovery and Search Analytics

BidWala v0.2.5-beta focuses on production hardening, safer demo report ownership, Tender Discovery accuracy, closed tender workflows, admin controls, upload validation, mobile navigation and search visibility.

Security fixes

  • Aligned production auth secret handling so middleware and app auth fail closed without the configured secret.
  • Hardened report sharing and stale token handling around protected report access.
  • Strengthened attachment validation so renamed executables cannot pass as tender PDFs.

Report sharing hardening

  • Closed bearer-token gaps on demo report PDF and qualification-answer routes.
  • Blocked claimed demo report access for anonymous visitors and non-owners.

Demo claim security

  • Made demo claim idempotent and race-safe.
  • Prevented duplicate saved reports and duplicate usage events from repeated claim attempts.

Tender Discovery date logic

  • Tender Discovery now filters by the later of today in IST and the import floor date.
  • The public UI displays the computed effective date instead of hardcoded date copy.

Closed tenders workflow

  • Added a closed tenders workflow for bids moved out of active Tender Discovery.
  • Preserved effective end dates, manual overrides and closure reasons for audit visibility.

Admin date override

  • Improved admin bid-end override review paths for Tender Discovery records.
  • Kept active and closed tender admin views aligned with effective date behavior.

Attachment validation

  • Validated PDF magic bytes and ZIP signatures for office attachments.
  • Made storage cleanup fail visibly instead of silently orphaning upload objects.

Mobile nav fixes

  • Authenticated mobile users now see Dashboard, Run Analysis, Tender Discovery, Profile and Logout.
  • Mobile calls to action match the desktop authenticated navigation paths.

Search analytics

  • Tender Discovery search events now capture keyword, filters, result count, timestamp, user or anonymous identity and source page.
  • Admins can review latest searches, top searched keywords, daily search volume and zero-result searches.

SEO improvements

  • Improved Tender Discovery metadata for GeM tenders and government tenders.
  • Added structured public copy and internal links across active tenders, closed tenders, demo and pricing.