Klamra Paycal for Aspaclaria

Changelog

1.2.9

• Improved WooCommerce order completion by passing the verified PayCal payment ID as the WooCommerce transaction ID after successful hosted checkout verification.
• Hardened hosted checkout return handling so the success confirmation is shown only after server-to-server verification confirms the order is paid.
• Sanitizes hosted return request values and keeps failed verification details in private order notes or logs only.
• No UI/admin design, merchant connection, license behavior, PayPal, checkout.paycal.online session flow, WooCommerce email logic, or payment status rules changed.

1.2.8

• Fixed old hosted checkout customer return after successful Apple Pay payment.
• wc-api=paycal_hosted_return now serves a no-cache HTML transition page after successful verification.
• Prevents legacy template_redirect handler from interfering with the dedicated wc-api return handler.
• Removes pending Location headers and returns HTTP 200 before outputting the transition page.
• Adds response mode diagnostics for hosted return: html_transition.
• No payment verification, payment_complete, order status, PayPal, checkout.paycal.online, capture logic, or forced completed status changed.

1.2.7

• Improved successful old hosted checkout return experience.
• After successful verification, wc-api=paycal_hosted_return serves a no-cache confirmation transition page from the store domain.
• The transition page redirects customers to the WooCommerce order-received URL using window.location.replace(), with meta refresh and fallback link.
• Preserves existing merchant connection and license data across plugin updates/replacements.
• uninstall.php now preserves PayCal connection/license/invoice data by default.
• Data is removed only when paycal_remove_data_on_uninstall is explicitly set to yes.
• Adds connection persistence diagnostics for settings, license data, merchant ID, terminal ID, public key, sync state, and plugin basename changes.
• Avoids marking license invalid on temporary API/HTTP/malformed-response failures.
• No payment verification, PayPal, checkout.paycal.online session flow, capture logic, or forced completed status changed.

1.2.6

• Added explicit order save after successful PayCal hosted checkout verification and payment_complete().
• Confirmed hosted return redirects to the WooCommerce order-received URL after verification.
• Keeps WooCommerce email hooks intact and does not suppress order emails.
• No PayPal, checkout.paycal.online session flow, capture logic, or forced completed status changed.

1.2.5

• Added explicit order save after successful PayCal hosted checkout verification and payment_complete().
• Confirmed hosted return redirects to the WooCommerce order-received URL after verification.
• Keeps WooCommerce email hooks intact and does not suppress order emails.
• No PayPal, checkout.paycal.online session flow, capture logic, or forced completed status changed.

1.2.4

• Fixed old pay.aspaclaria.co.il hosted checkout return bridge.
• Added dedicated WooCommerce API return endpoint for PayCal hosted checkout returns.
• Old hosted checkout now returns through wc-api=paycal_hosted_return so server-to-server verification runs reliably.
• Redirects customers to the clean WooCommerce order-received URL after successful verification.
• Preserves backward compatibility with existing template_redirect return handling.
• No PayPal, new checkout.paycal.online session flow, capture logic, or forced completed status changed.

1.2.3

• Added return verification support for generic PayCal checkout sessions.
• Connector now sends the latest pcs_ checkout session ID to server-to-server verification.
• Avoids duplicate failed verification notes on repeated return handling.
• No PayPal, old hosted checkout behavior, capture logic, or forced completed status changed.

1.2.2

• Improved PayCal Apple Pay private WooCommerce approval notes using existing verification values.
• Added cleaner payment evidence summary for approved PayCal orders.
• Avoids duplicate approval notes for the same PayCal payment ID.
• No checkout flow, capture logic, PayPal behavior, or order status logic changed.

1.2.1

• Added planned PayCal Order Evidence Log roadmap UI to the Marketplace/Bundles admin page.
• Reframed shipping evidence as a synchronized order evidence layer between merchant, customer, and PayCal.
• Added planned timeline/status copy for order handling, customer updates, delivery proof, and digital/service fulfillment.
• Improved Hebrew PayCal connector wording using ל־PayCal / ו־PayCal / ב־PayCal.
• No payment flow, checkout logic, capture logic, provider sync, persistence, uploads, or order status logic changed.

1.2.0

• Demo-ready merchant wording.
• Generic merchant positioning.
• License Token wording consistency.
• Test connection / sync wording.
• Connector event reporting for merchant onboarding.
• Safe provider wording.
• No payment flow changes.

1.1.9

• Added an opt-in checkout.paycal.online session redirect with safe fallback to the existing hosted checkout flow.
• Clarified demo-ready admin wording for PayCal checkout, payment-management and approved provider connections.
• Existing Apple Pay, payment processing, return handling, verification, and WooCommerce order status behavior remain unchanged.

1.1.8

• UI polish release.
• Refined PayCal dashboard hero, cards, badges, stats, and quick actions.
• Improved Dragon Shield artwork placement.
• Polished Marketplace / Bundles page layout.
• Improved ornate golden lock artwork placement.
• Preserved checkout, payment processing, Apple Pay, licensing, sync, connector behavior, and WooCommerce order status logic.

1.1.7

• Design fixes release.
• Added PayCal dashboard hero artwork with an updated transparent Dragon Shield brand image.
• Added Marketplace / Bundles hero artwork with an updated transparent ornate golden lock illustration.
• Refined dashboard and bundles page visuals for a cleaner premium branded experience.
• Switched dashboard artwork to cache-busting clean asset filenames.

1.1.6

• Added License Token validation against the configured PayCal Platform endpoint.

1.1.5

• Security: Restricted invoice downloads to the owning customer or authorized shop managers. Added nonce validation, invoice post type validation, linked order validation, and capability checks for the PayCal invoice download endpoint.

1.1.4

• WordPress 7 safety hardening release: guarded loading, safer API failure handling, admin visibility, sanitized logging, and tested with PHP 8.3.31 / hardened for PHP 8.3.31 without payment-flow changes.

1.1.2

• Production release based on the live WordPress.com plugin export.
• Version bump for WordPress.org update distribution.

1.0.6

• Hardening release: safe loading for missing files and fallback permissions module.

1.0.4

• Added a permissions management screen for PayCal administrators
• Kept plugin structure aligned with version 1.0.3 for WordPress.org consistency
• Enforced saved permissions across Dashboard, Bit, Invoices, License and Setup screens
• Improved README version consistency
• Locked the permissions screen to a single owner admin with an extra access code

1.0.3

• Tested with WordPress 6.9.4
• Improvements and small fixes

1.0.2

• Initial improvements