Blog | eSeGeCe

eSeGeCe Blog

Release notes, deep dives, and tutorials for sgcWebSockets, sgcHTML, sgcOpenAPI, sgcSign, sgcBiometrics, and sgcIndy.

· Releases

sgcWebSockets 2026.8: QUIC, HTTP/3, Static OpenSSL and a TLS Overhaul

sgcWebSockets 2026.8 adds QUIC and HTTP/3 components, OpenSSL linked inside the executable, more than 30 new sgcHTML components, a rewritten SChannel TLS layer, zlib 1.3.1 and a CycloneDX SBOM…

· Components

sgcWebSockets now installs its own SBOM

The installer now produces a CycloneDX SBOM for the edition being packaged and installs it as sbom.cdx.json, so the file can never drift from the code it describes…

· Components

zlib 1.3.1 in sgcWebSockets and sgcOpenAPI

zlib moves from 1.2.12 to 1.3.1. Because zlib is linked statically, the update meant rebuilding three separate object sets and proving them on every supported compiler…

· Components

Binance Rate Limits in Delphi: Batching, Pacing and Readable 429s

Read Retry-After on an HTTP 429, subscribe a whole watchlist with one frame, and stop exchanges closing your connection after a reconnect…

· Components

sgcProtoBuf: From .proto Files to Delphi Units

sgcProtoBuf turns Protocol Buffers definitions into Delphi units, resolving imports recursively and generating one unit per package…

· Components

TsgcHTTPRESTServer: the New REST Server Component

TsgcHTTPRESTServer is a new HTTP server component for REST APIs, adding CORS, metrics and health endpoints and multi-tenancy on top of TsgcHTTPServer…

· Components

REST Server + OpenAPI: Contract-First APIs in Delphi

Attach the OpenAPI plugin to TsgcHTTPRESTServer and let one spec drive routing, validation, security and Swagger UI, with a single assignment as the whole wiring…

· Components

REST Server: Users, Multi-Tenancy and Metrics

A hashed user store wired into HTTP Basic, five ways to resolve a tenant per request, and Prometheus metrics with a health endpoint for TsgcHTTPRESTServer…

· Components

Static OpenSSL Linking in sgcWebSockets: No More libcrypto and libssl DLLs

OpenSSL can now be linked directly inside your sgcWebSockets executable instead of being loaded at runtime from libcrypto and libssl DLLs. Add one unit to the uses clause and there is nothing else to configure…

· Components

TCPKeepAlive and KeepAliveTimeout for IOCP and EPOLL Servers

sgcWebSockets adds TCPKeepAlive and KeepAliveTimeout to the IOCP and EPOLL server engines, closing connections whose peer silently disappeared instead of leaving them open forever…

· Components

HTTP/3 Client and Server Components for Delphi and C++ Builder

sgcQUIC brings HTTP/3 to Delphi and C++ Builder with TsgcHTTP3Client and TsgcHTTP3Server, running HTTP semantics over QUIC with QPACK header compression, every verb, async requests and Alt-Svc discovery…

· Components

QUIC Client and Server Components for Delphi and C++ Builder

sgcQUIC adds the QUIC transport protocol to Delphi and C++ Builder with TsgcQUICClient and TsgcQUICServer, built on the native OpenSSL 3.5 QUIC engine with TLS 1.3, multiplexed streams and 0-RTT…

· Features

sgcHTML on WebBroker and DataSnap

Serve sgcHTML pages from any WebBroker application and from DataSnap servers, with live WebSocket updates on the same port as your DataSnap REST endpoints…

· Components

Three New sgcHTML Admin Components: Presence, RolesPermissions and UserManagement

Three new sgcHTML admin components: Presence for a live who's-online roster, RolesPermissions for a grant matrix, and UserManagement for a full user administration table…

· Components

Six New sgcHTML Feedback Components: Badge, PDFViewer, ContextMenu, ProgressBar, JobProgress and LogViewer

Six new sgcHTML feedback and layout components: Badge, PDFViewer, ContextMenu, ProgressBar, JobProgress and LogViewer — telling a visitor what's happening right now…

· Components

Six New sgcHTML Form Inputs: MultiSelect, ColorPicker, Slider, TimePicker, SignaturePad and Transfer

Six new sgcHTML form components: MultiSelect, ColorPicker, Slider, TimePicker, SignaturePad and Transfer — the inputs a real admin form needs beyond a plain text box…

· Components

Six New sgcHTML Visuals: Heatmap, Sparkline, CandlestickChart, TreeMap, QRCode and Barcode

Six new sgcHTML visuals rendered as pure server-side SVG: Heatmap, Sparkline, CandlestickChart, TreeMap, QRCode and Barcode — no charting library, no client-side JavaScript…

· Components

Integrating Third-Party JavaScript Libraries in sgcHTML

Drop D3.js, Chart.js, a DevExtreme Grid or any browser library into an sgcHTML page with three hooks, or wrap it in a reusable server-side component…

· Components

Four New sgcHTML Components for Structured Data: TreeGrid, PivotTable, ActivityFeed and Splitter

Four new sgcHTML components for structured data: TreeGrid for hierarchical tables, PivotTable for grouped aggregates, ActivityFeed for live event streams, and Splitter for resizable two-pane layouts…

· Releases

sgcWebSockets 2026.7: Clustering, Message History, async / await and Hardened Clients

sgcWebSockets 2026.7 adds multi-server clustering, message history with reconnect recovery, async / await, backoff and retries, send-queue backpressure, HTTP server compression and a hardened HTTP client…

· Components

Crypto Feeds That Survive a Reconnect, and a Rate Limiter That Keeps You Unbanned

Automatic resubscribe after a reconnect on the Binance, Kraken, Coinbase and other exchange clients, plus a client-side rate limiter that caps how many REST requests you send in a time window…

· Components

OAuth2 for the MCP Client, and the Identity Assertion Grant

The MCP client can now authenticate with OAuth2: it fetches the token, caches it and reuses it until it expires. Plus a new grant type, the Identity Assertion Authorization Grant, for chaining an identity across domains…

· Components

Backpressure: Send-Queue Limits for Slow WebSocket Clients

One client that stopped reading can grow a broadcasting server's memory until it falls over. sgcWebSockets 2026.7 bounds the per connection send queue with MaxQueueSize and three overflow policies, plus an OnSendBufferFull event…

· Components

E2EE Identity Verification: Stopping a Key Swap in the Middle

Encrypting to a public key is worthless if the key came from the attacker. sgcWebSockets now signs each ephemeral E2EE key with a long-term identity key, so peers verify the signature, compare fingerprints and pin them…