Skip to content

Releases: wl-online-payments-direct/plugin-sapcommercecloud

Release list

Release 6.0

Choose a tag to compare

@jamesjohnstone-bravebison jamesjohnstone-bravebison released this 27 Mar 17:18

Worldline Direct Plugin for SAP Commerce Cloud v6.0

Full Changelog: v4.0...v6.0

Highlights

Version 6.0 is a major update that significantly expands payment method coverage, strengthens security, and introduces merchant-facing configuration improvements — including 14 new payment methods, a Worldline Java SDK upgrade to v6.3.1, 3D Secure exemption management, and a critical XSS security fix.


New Payment Methods

Payment Method Product ID Notes
Alipay+ 5405 Sale only
WeChat Pay 5404
Union Pay International 56
Discover 128
BLIK 3204
Przelewy24 3124
EPS 5406
Linxo Connect 5003 Sale only
Chèques-Vacances Connect 5403 Sale only (order payment in full)
Pledg 5300 Sale only
Floa 1x / 3x / 4x / 10x 5138–5144 Sale only; instalment plans
Oney Card 5127 New dedicated payment mode type
Oney Branded Card 5128 Inactive by default

Modified: iDEAL has been renamed to iDEAL | WERO to reflect Worldline's updated product.


Features

3D Secure Exemption Management

Merchants can now configure SCA exemption strategies from the Backoffice:

  • No Exemption — standard 3DS challenge flow
  • No Challenge Request — request no challenge from the issuer
  • Low Value — exempt transactions below a configurable amount threshold
  • Transaction Risk Analysis — leverage TRA exemption where eligible

Exemptions apply to EUR transactions only. Liability and applied exemption details are captured and visible on payment info in the Backoffice.

Mealvoucher Payments

Full support for mealvoucher payment products with product-level type classification (Food & Drink, Home & Garden, Gift & Flowers), intelligent line-item merging for the Worldline shopping cart, and mealvoucher brand captured on the payment response.

Payment Mode Sorting & Filtering

Merchants can define which payment methods appear at checkout and in what order via a configurable list on the Worldline Configuration in the Backoffice. Ungrouped methods not in the list are hidden.

Payment Mode Name Overriding

A new overrideName flag allows merchants to use their own configured payment mode names instead of the Worldline-provided display names.

Locale Code Support

A new localeCode attribute on Language allows precise locale strings (e.g. fr_BE vs fr) to be sent to Worldline Hosted Checkout and Hosted Tokenization pages, improving localisation accuracy. This now applies to all checkout types.

Feature Request from Backoffice

A new wizard in the Backoffice allows merchants to submit feature requests directly to Worldline.

Authorisation Webhook Handling

The plugin now processes AUTHORIZED webhook events from Worldline, creating or updating payment transactions accordingly and preventing duplicate processing.

Order-Level Discount Support

Order-level discounts are now sent to Worldline as a dedicated value, replacing the previous approach of apportioning them across line items.


Bug Fixes

  • Security: XSS vulnerability fixed — Payment product labels in the B2C and B2B checkout are now properly HTML-escaped, preventing potential cross-site scripting attacks.
  • Recurring payments with preauthorisation — Fixed an issue where hosted tokenization preauth flows did not correctly send tokenize=true, and now correctly accepts CREATED status for zero-value authorisations.
  • Tokenize parameter handling — The tokenize parameter is no longer sent unnecessarily on hosted tokenization requests where a token already exists.
  • Non-EUR / non-3DS transactions — Fixed a logic issue that could cause errors on non-EUR transactions without 3DS.
  • Session timeout typo — Fixed sessionTimoutsessionTimeout property name throughout.
  • worldlineAdValoremRate precision — Changed from Float to BigDecimal for accurate rate calculations.

SDK & Technical Changes

  • Worldline Java SDK upgraded from 4.22.06.3.1 — includes updated response data objects (MandatePersonalNameResponse, MandateCustomerResponse, etc.), new DateTime handling, and package path changes.
  • Added Gson 2.11.0 as an explicit dependency.
  • Refactored complex logic into dedicated factory classes (WorldlineThreeDSecureFactory, WorldlinePaymentProduct130SpecificInputFactory, MealvouchersWorldlineShoppingCartFactory).
  • Hardcoded sale-only payment product lists replaced with configurable saleOnly flag per payment mode.
  • Removed deprecated Backoffice configuration attributes that are no longer relevant.

Compatibility

  • SAP Commerce Cloud 2211.28 release
  • SAP Commerce Cloud Version 2 of the SAP hosted environments
  • Worldline SDK v6.3.1

Upgrade Notice

Breaking changes — Merchants upgrading from v4.0 should review the following before upgrading.

  1. Data model changes*-items.xml has been modified. A clean all build and system update/initialise is required.
  2. New Backoffice tabs — 3D Secure settings are now on a dedicated tab in the Worldline Configuration editor.
  3. Payment mode properties — Existing payment modes gain new attributes (intersolve, saleOnly, overrideName). Review and re-import projectdata-paymentmodes.impex.
  4. Oney configuration — If using Oney, payment modes must be reconfigured using the new OneyPaymentMode type with the optional paymentOption attribute.