X-Radius 0.2.21

Fixed

• Card reversals always leave a balanced ledger. Two paths that could credit a wallet without a matching debit are closed.
• Sessions that move a very large amount of traffic are now metered from the full counters the router reports, so a long or fast session is billed for what it actually used.
• Session correlation is bound to the network device that was verified for the request, so an accounting packet can no longer be attributed to the wrong tenant.
• Permission checks around administrator roles were tightened in two places.
• The subscriber portal shows a clear message when a server error occurs, instead of an empty screen.
• A fresh installation bootstraps its database cleanly.

Changed

• Timestamps, status codes and error envelopes across the API now follow the published contract everywhere, including the responses the edge returns when a request is rate limited.