Changelog

2026-11-10 — 1.0.0-preview.2

Changes from 1.0.0-preview.1. They are breaking for anyone who built against the earlier draft.

Authorization server metadata. The RFC 8414 document at /.well-known/oauth-authorization-server names the token endpoint, client_secret_basic and the supported scopes.
Opaque access tokens. Access tokens are opaque strings with an environment prefix (sim_dev_at_…, sim_prod_at_…), not JWTs. Do not parse them. Client IDs and secrets have prefixes too (sim_dev_c_…, sim_dev_s_…). There is no issuer or audience to validate and no signing keys to fetch.
languages removed from the organization.
institution_type is required in the organization and is never null: one of primary, secondary, higher, adult or other.
The organization.read scope now covers name, type, institution type and country.

2026-11-06 — 1.0.0-preview.1

The design of the Simblia Developer API v1 is decided: read-only access to your own organization, OAuth 2.0 client credentials, 600 requests per minute. Nothing is live yet.