Glin Payments for WooCommerce

ცვლილებები

0.1.8

• Load the checkout styles and the payment-status script on the My Account order page too.
  A pending PIX order shown there had an unstyled QR code and a status line that said it
  was waiting for confirmation but never updated, because nothing was polling it.

0.1.7

• Stop the PIX QR code filling the whole column on desktop. The size was set on the image,
  and Elementor’s .elementor img { max-width: 100% } is a more specific selector, so it
  won and the code stretched to the width of the page. The QR code is now sized by a
  container of its own, which a theme has no reason to restyle.

0.1.6

• Fix classic checkout never sending payment data. WooCommerce dispatches
  checkout_place_order_ with triggerHandler(), which does not bubble, so the
  handler bound on document.body never ran and orders were placed with an empty payload
  and immediately failed with “Glin payment was not ready.”
• Bind the place-order handler to form.checkout directly and re-bind it after each
  checkout update.
• Fix every card payment failing with “This remittance is not available for the current
  checkout session.” The {remittanceId} placeholder in the prepare endpoint URL was
  stripped by esc_url_raw(), so the request went to a literal remittanceId path.
  Affected both classic and block checkout.
• Send the billing phone in E.164 when preparing a payment. WooCommerce stores whatever
  the shopper typed, and the unnormalized value was rejected, so card payments could not
  get past the prepare step. The pay request already normalized; prepare did not.
• Stop mangling phone numbers in area code 55, and accept a phone written with the
  national trunk “0” before the area code. Brazil’s country code and the Santa Maria area
  code are the same two digits, so testing for a “55” prefix removed those shoppers’ area
  code instead of adding the country code and their payments were rejected. Length tells
  the two apart once the trunk “0” is stripped.
• POST the 3D Secure challenge with its creq field instead of opening the ACS URL as a
  plain link. EMV 3DS 2.x answers a bare GET with an error page. Falls back to a link when
  the provider sends no creq.
• Treat an expired or canceled remittance as terminal. A checkout abandoned before any
  order exists reports only remittanceStatus, so orders previously stayed in “pending
  payment” forever and consumed every reconciliation attempt.
• Keep polling for payment confirmation for the full 32 minutes a PIX code can be paid in,
  up from 6, and tell the payer when the page stops watching instead of leaving “Waiting
  for payment confirmation” on screen forever.

0.1.5

• Log sanitized Glin API failure context to WooCommerce logs when debug logging is
  enabled.
• Include request method, endpoint path, status code, safe remittance fields, and
  boolean presence checks for sensitive customer, address, and card payload fields.
• Keep card tokens, device fingerprints, CPF/CNPJ, email, phone, and full address
  values out of plugin logs.

0.1.4

• Validate WooCommerce order totals against the Glin merchant API amount range before
  initializing checkout.
• Replace raw API validation text with a shopper-safe order amount message.

0.1.3

• Verify the webhook JWS over the raw request body, as required by the unencoded
  detached payload form (RFC 7797). Earlier versions base64url-encoded the body first
  and rejected every valid signature.
• Check the protected header claims before trusting a webhook: alg is RS256, b64 is
  false, aud matches the integration account, and kid names a key in Glin’s JWKS.
• Send the API key as a Bearer token when fetching the JWKS, which that endpoint requires.

0.1.2

• Remove screenshot captions until matching WordPress.org screenshot assets are available.

0.1.1

• Initial pilot release of the Glin WooCommerce gateway.