Releases: wl-online-payments-direct/plugin-sapcommercecloud
Release list
Release 6.0
Worldline Direct Plugin for SAP Commerce Cloud v6.0
Full Changelog: v4.0...v6.0
Highlights
Version 6.0 is a major update that significantly expands payment method coverage, strengthens security, and introduces merchant-facing configuration improvements — including 14 new payment methods, a Worldline Java SDK upgrade to v6.3.1, 3D Secure exemption management, and a critical XSS security fix.
New Payment Methods
| Payment Method | Product ID | Notes |
|---|---|---|
| Alipay+ | 5405 | Sale only |
| WeChat Pay | 5404 | — |
| Union Pay International | 56 | — |
| Discover | 128 | — |
| BLIK | 3204 | — |
| Przelewy24 | 3124 | — |
| EPS | 5406 | — |
| Linxo Connect | 5003 | Sale only |
| Chèques-Vacances Connect | 5403 | Sale only (order payment in full) |
| Pledg | 5300 | Sale only |
| Floa 1x / 3x / 4x / 10x | 5138–5144 | Sale only; instalment plans |
| Oney Card | 5127 | New dedicated payment mode type |
| Oney Branded Card | 5128 | Inactive by default |
Modified: iDEAL has been renamed to iDEAL | WERO to reflect Worldline's updated product.
Features
3D Secure Exemption Management
Merchants can now configure SCA exemption strategies from the Backoffice:
- No Exemption — standard 3DS challenge flow
- No Challenge Request — request no challenge from the issuer
- Low Value — exempt transactions below a configurable amount threshold
- Transaction Risk Analysis — leverage TRA exemption where eligible
Exemptions apply to EUR transactions only. Liability and applied exemption details are captured and visible on payment info in the Backoffice.
Mealvoucher Payments
Full support for mealvoucher payment products with product-level type classification (Food & Drink, Home & Garden, Gift & Flowers), intelligent line-item merging for the Worldline shopping cart, and mealvoucher brand captured on the payment response.
Payment Mode Sorting & Filtering
Merchants can define which payment methods appear at checkout and in what order via a configurable list on the Worldline Configuration in the Backoffice. Ungrouped methods not in the list are hidden.
Payment Mode Name Overriding
A new overrideName flag allows merchants to use their own configured payment mode names instead of the Worldline-provided display names.
Locale Code Support
A new localeCode attribute on Language allows precise locale strings (e.g. fr_BE vs fr) to be sent to Worldline Hosted Checkout and Hosted Tokenization pages, improving localisation accuracy. This now applies to all checkout types.
Feature Request from Backoffice
A new wizard in the Backoffice allows merchants to submit feature requests directly to Worldline.
Authorisation Webhook Handling
The plugin now processes AUTHORIZED webhook events from Worldline, creating or updating payment transactions accordingly and preventing duplicate processing.
Order-Level Discount Support
Order-level discounts are now sent to Worldline as a dedicated value, replacing the previous approach of apportioning them across line items.
Bug Fixes
- Security: XSS vulnerability fixed — Payment product labels in the B2C and B2B checkout are now properly HTML-escaped, preventing potential cross-site scripting attacks.
- Recurring payments with preauthorisation — Fixed an issue where hosted tokenization preauth flows did not correctly send
tokenize=true, and now correctly acceptsCREATEDstatus for zero-value authorisations. - Tokenize parameter handling — The
tokenizeparameter is no longer sent unnecessarily on hosted tokenization requests where a token already exists. - Non-EUR / non-3DS transactions — Fixed a logic issue that could cause errors on non-EUR transactions without 3DS.
- Session timeout typo — Fixed
sessionTimout→sessionTimeoutproperty name throughout. worldlineAdValoremRateprecision — Changed fromFloattoBigDecimalfor accurate rate calculations.
SDK & Technical Changes
- Worldline Java SDK upgraded from 4.22.0 → 6.3.1 — includes updated response data objects (
MandatePersonalNameResponse,MandateCustomerResponse, etc.), newDateTimehandling, and package path changes. - Added Gson 2.11.0 as an explicit dependency.
- Refactored complex logic into dedicated factory classes (
WorldlineThreeDSecureFactory,WorldlinePaymentProduct130SpecificInputFactory,MealvouchersWorldlineShoppingCartFactory). - Hardcoded sale-only payment product lists replaced with configurable
saleOnlyflag per payment mode. - Removed deprecated Backoffice configuration attributes that are no longer relevant.
Compatibility
- SAP Commerce Cloud 2211.28 release
- SAP Commerce Cloud Version 2 of the SAP hosted environments
- Worldline SDK v6.3.1
Upgrade Notice
Breaking changes — Merchants upgrading from v4.0 should review the following before upgrading.
- Data model changes —
*-items.xmlhas been modified. A clean all build and system update/initialise is required. - New Backoffice tabs — 3D Secure settings are now on a dedicated tab in the Worldline Configuration editor.
- Payment mode properties — Existing payment modes gain new attributes (
intersolve,saleOnly,overrideName). Review and re-importprojectdata-paymentmodes.impex. - Oney configuration — If using Oney, payment modes must be reconfigured using the new
OneyPaymentModetype with the optionalpaymentOptionattribute.