Alynt Account Gateway v1.1.44

What's New in v1.1.44

This maintenance release hardens Account Gateway login and account routes against page-cache interference, including GridPane page-cache behavior that can leave users retrying expired forms.

Highlights

• Adds explicit no-cache and GridPane bypass headers to branded gateway routes.
• Applies cache-bypass protections before branded auth and registration POST redirects.
• Changes the expired-form message from session-specific wording to a neutral form-expired message.
• Adds privacy-safe diagnostics for expired branded-login form tokens.

Changelog

• Prevent branded login, account-action, registration, password, and dashboard gateway responses from being stored by common WordPress/page-cache layers.
• Keep expired form-token handling blocking, but present clearer customer-facing copy: "This form expired. Please review it and try again."

Upgrade Notes

No breaking changes in this release.

Alynt Account Gateway v1.1.43

What's New in v1.1.43

This maintenance release improves Turnstile reporting accuracy in the Account Gateway Security tab. Missing browser-submitted Turnstile tokens are now tracked separately from missing Turnstile configuration, so customer/browser challenge issues are not mislabeled as key or outbound connectivity failures.

Highlights

• Separates missing submitted Turnstile challenge tokens from missing saved Turnstile configuration.
• Keeps missing-token registration attempts blocked while showing a safe frontend message.
• Updates Security tab guidance and provider health grouping so token-submission issues no longer inflate Turnstile connectivity warnings.

Changelog

• Distinguish missing submitted Turnstile challenge tokens from missing Turnstile configuration so Security tab guidance no longer reports customer/browser token-submission issues as key or connectivity failures.

Upgrade Notes

No breaking changes in this release.

Alynt Account Gateway v1.1.42

What's New in v1.1.42

This release adds a safe Registration setting for choosing which role is assigned after a visitor confirms their email and sets a password. Customer remains the default for WooCommerce sites, with Subscriber fallback when the Customer role is unavailable.

Highlights

• Adds a Registration tab setting for new-user role assignment.
• Restricts public registration assignment to safe Customer/Subscriber roles.
• Adds rollback protection if no safe assignable role exists.

Changelog

• Add a Registration setting for choosing the safe role assigned after confirmed account creation, with Customer as the default and Subscriber fallback when Customer is unavailable.

Upgrade Notes

No breaking changes in this release.

Alynt Account Gateway v1.1.41

Added

• Always show a centered custom dashboard footer copyright line with the current year and site name, even when the optional dashboard footer menu is disabled.

Verification

• Build passed locally.
• PHPCS passed locally.
• PHPUnit passed locally: 603 tests, 4250 assertions.
• Lightweight feature bloat and structure review found no cleanup or split work needed.

Alynt Account Gateway v1.1.40

Fixed

• Harden optional FunnelKit contact sync table detection and backfill handling for escaped LIKE patterns and NULL contact-name fields.

Verification

• Full PHPUnit suite: 603 tests, 4,244 assertions.
• Focused FunnelKit and registration integration tests: 10 tests, 27 assertions.
• PHPCS lint passed.
• Build completed.

Alynt Account Gateway v1.1.39

Fixed

• Sync first and last names into matching FunnelKit/Autonami contacts after Account Gateway creates a confirmed registration user.
• No-op safely on sites without FunnelKit.
• Add WP-CLI backfill support for existing linked FunnelKit contacts with blank names.

Verification

• Quality workflow passed on PHP 7.4 and PHP 8.3.
• Full PHPUnit, adversarial tests, PHPCS, build, POT generation, and npm audit passed locally.

Alynt Account Gateway v1.1.38

Added

• Add a Security setting that allows sites to keep email-only login by default or permit email-or-username login for legacy user workflows.

Verification

• Full PHPUnit suite: 592 tests, 4,210 assertions.
• PHPCS passed.
• Build and POT generation passed.
• npm audit found 0 vulnerabilities.
• Targeted ds2 feature reviews passed: light, security, bloat/structure, and UI/UX.

Alynt Account Gateway v1.1.37

Fixed

• Avoid WordPress 6.7+ early translation-loading notices when settings defaults are read during early routing, authentication, or CLI bootstrap paths.

Verification

• Focused PHPUnit settings-schema regression: 13 tests, 74 assertions.
• Full PHPUnit suite: 588 tests, 4,198 assertions.
• PHPCS, frontend build, POT generation, npm audit, Composer audit, and whitespace checks passed.

The release asset is built and attached by the Build Release workflow.

Alynt Account Gateway v1.1.36

Added privacy-safe public comment and product-review author name formatting for logged-in users, with configurable Privacy & Data options. Simplified branded Account Details by removing redundant saved-state copy and hiding WooCommerce's Display Name row while deriving the saved display name from first and last name. Linked gateway-screen logos to the site homepage and improved card framing when the configured page background is white. Verification: full PHPUnit, PHPCS, frontend build, POT regeneration, ds2 feature reviews, and whitespace checks passed.

Alynt Account Gateway v1.1.35

Added

• Add an Advanced / Tools Custom CSS setting with WordPress code-editor support and conservative CSS sanitization.

Changed

• Style gateway notice backgrounds and left borders from the configured primary color, using a 10% background tint and a 2px border without rounded corners.

Verification

• Full PHPUnit suite: 573 tests, 4,176 assertions.
• PHPCS passed.
• Build, POT regeneration, and npm test passed.

The release asset is built and attached by the Build Release workflow.