v0.7.1

Square Terminal for WooCommerce 0.7.1

Square Terminal payments now start correctly from WCPOS checkouts.

Fixed

WCPOS checkout no longer fails with “Invalid nonce”

WCPOS renders the order-pay page while acting as the order customer, then submits the payment request as the logged-in cashier. WordPress nonces are tied to the user that created them, so Square rejected every payment request when those two user contexts differed.

The checkout already sends an order-scoped credential: the WooCommerce order key or a short-lived signed payment token. Payment actions now accept either valid credential without also requiring the mismatched WordPress nonce, matching the established Stripe Terminal and SumUp Terminal integrations.

Requests that rely only on the cashier's manage_woocommerce capability still require a valid nonce. Empty order keys are explicitly rejected.

Upgrade notes

• No settings changes required.
• Existing paired Terminal Devices remain paired.
• Requires PHP 8.1+, WordPress 6.5+, and WooCommerce 8.0+.

Verification status

• Observed: the regression test failed with status 403 before the fix and passes with status 200 after it when the order key is valid.
• Observed: composer lint clean, composer test 243 tests / 854 assertions, composer test:js 26/26.
• Not verified on a live WCPOS checkout or Square Terminal.