Changelog

v3.6.0 Payment User Checks, CDK Delivery & Settlement

• Payment eligibility is clearer, with existing SDK integrations supported: Apps using hosted login require an active registered user with a valid identity in the same app before payment. Existing SDK integrations need no upgrade or new required parameters. Confirmed bank transfers must be recorded through an authorized admin or server integration.
• CDK products support stocked and external delivery: Import codes in batches, manage inventory, and deliver after payment. Codes generated by external suppliers can also be recorded with delivery results and costs, with reconciliation and settlement by batch.
• Checkout and refunds are smoother: Switching payment methods preserves the pending order, while Alipay scan redirects and CNY price selection for WeChat are more reliable. Admins can adjust refund amounts, issue partial refunds, and track processing status.
• Subscription timing and discounts are clearer: Upgrades credit the remaining value of the old plan, start a full new period the next day, and shift queued plans accordingly. Qualifying credit-pack purchases can also unlock configured discounts, and expired credits no longer carry into a new balance.
• Hosted login adds username and password access: Support account registration, password sign-in, and configurable captcha verification, with more reliable WeChat fallback access and desktop login result delivery.
• Reconciliation and project settlement are more complete: Fetch monthly Alipay statements, reconcile confirmed bank-transfer income, and filter business exceptions. Export filtered project costs and generate monthly settlement sheets in batches, including refunds, fees, and participant payment details.

v3.5.1 Explicit Subscription Purchase & Upgrade Options

• SDK v3.5.0 is now available: Server integrations can request the subscription products a user can actually upgrade to instead of inferring plan ranks locally.
• Regular and upgrade purchases are explicit: Order creation now accepts STANDARD for regular or repeat purchases and UPGRADE for upward-only subscription changes.
• Historical plans remain upgradeable: Upgrade options can map older subscription tiers into the current hierarchy while preserving the original billing cycle and prorated credit.

v3.5.0 Expiring Credit Pools & Product Configuration Guardrails

• Expiring credit consumption is now supported: Integrations can consume subscription-cycle credits first, spend the grants that expire soonest within the same key, and then fall back to permanent credits or another entitlement key.
• SDK and HTTP integrations can inspect credit buckets: @youidian/sdk v3.3.11 adds ordered pool consumption and active bucket lookup, with matching HTTP endpoints for server-to-server integrations.
• Product lists show key configuration signals: The product admin now surfaces auto trial, inventory, and subscription group status directly in the list, including the subscription group code when configured.
• Numeric entitlement keys are safer to configure: Product setup now guides teams to keep subscription-cycle keys consistent inside a subscription group and prevents the same numeric key from being reused across conflicting product scopes in the same app.

v3.4.0 Custom Recharge, Refund Records & Admin Search

• Custom amount recharge is now available for credit products: Admins can configure per-currency minimums, maximums, steps, and conversion rates, while hosted checkout and SDK integrations can let users enter the exact recharge amount they want.
• Checkout enforces recharge limits on the server side: Hosted checkout, embedded PayPal, and SDK-created orders now use the product configuration to validate custom amounts before payment and grant the correct numeric entitlement after payment.
• Refund records are easier to audit: Admin refunds and PayPal/provider refund webhooks now keep structured refund records, and admins can backfill missing refund records for older refunded orders.
• Order admin search is more precise: The order list now separates merchant order ID, user nickname, and provider transaction ID filters, making reconciliation and support investigations faster.
• Payment operations are safer and clearer: Hosted/API order creation rejects raw card data, checkout proxy redirects are more stable, and product status can be toggled directly from the product list.

v3.3.0 Embedded Login, App Sharing & Callback Reliability

• SDK login now opens in an embedded modal by default: Integrations can keep phone and WeChat login inside the page, while Google and Apple authorization still use a provider popup when required by the provider.
• Phone SMS login is ready for hosted sign-in: Users can complete phone-number sign-in and binding, and admins can test SMS providers and review delivery records from the login admin area.
• Apps can be shared across teams more safely: Payment apps and providers now support sharing workflows, making it easier to collaborate without duplicating app configuration.
• Admin operations are easier to audit: The payment admin now includes richer reporting, clearer merchant order identifiers, and product-code validation before products go live.
• Payment callbacks and webhooks are more reliable: Provider webhook delivery, callback result pages, refund channel handling, and Stripe/PayPal order metadata are more consistent across hosted and API integrations.

v3.2.0 HTTP Integration Docs & Safer Hosted Login Returns

• New HTTP integration docs track: You can now follow a full API-first guide for authentication, payment orders, login verification, webhooks, and launch checklist without using the SDK wrapper.
• Hosted login completes more reliably: OAuth sign-in now lands on a dedicated result page that confirms the final attempt state there, helping popup and embedded login flows finish more consistently.
• Shared callback domains are easier to deploy: Hosted login can now keep the correct return domain and prefixed API path when callbacks run behind Nginx or a shared passport domain, reducing broken post-login redirects.
• PayPal checkout now follows the unified order pipeline: Embedded PayPal flows now use the same order creation rules as the main checkout flow, helping keep pricing, validation, and subscription eligibility checks more consistent.

v3.1.0 Subscription Upgrades & Hosted Flow Improvements

• Subscription upgrades now show prorated credit: Hosted checkout can now calculate a credit from the remaining time on an active subscription and apply it to a higher-tier plan, so users see a clearer amount due before they pay.
• Upgrade restrictions are clearer: Rebuying the same subscription tier or moving to a lower tier is now blocked with explicit messaging, helping avoid accidental duplicate or downgrade purchases in hosted checkout.
• Hosted login finishes more reliably: OAuth callbacks now return to the hosted connect page to resolve the final login state there, reducing confusing callback mismatches and making sign-in completion more consistent.
• Portal users are easier to match across login, payment, and admin: Integrations now have clearer guidance for reusing the same platform user ID, and the admin order view can show the linked registered account when one is available.
• Entitlement expiry and upgrade replacement are more accurate: Subscription changes now clean up expired access more safely, keep admin displays closer to the real active state, and apply upgraded subscription entitlements more predictably.
• New hosted theme option: Hosted login and checkout now support a new minimal monochrome theme option for teams that want a cleaner visual style.

History

• App configuration became the shared subject for payments, login, products, and entitlements.
• Hosted checkout, SDK order creation, and order status lookup formed the basic payment loop.
• Hosted login, Webhooks, and entitlement grants gradually joined the same developer service flow.