Changelog

v3.5.1 Explicit Subscription Purchase & Upgrade Options

• SDK v3.5.0 is now available: Server integrations can request the subscription products a user can actually upgrade to instead of inferring plan ranks locally.
• Regular and upgrade purchases are explicit: Order creation now accepts STANDARD for regular or repeat purchases and UPGRADE for upward-only subscription changes.
• Historical plans remain upgradeable: Upgrade options can map older subscription tiers into the current hierarchy while preserving the original billing cycle and prorated credit.

v3.5.0 Expiring Credit Pools & Product Configuration Guardrails

• Expiring credit consumption is now supported: Integrations can consume subscription-cycle credits first, spend the grants that expire soonest within the same key, and then fall back to permanent credits or another entitlement key.
• SDK and HTTP integrations can inspect credit buckets: @youidian/sdk v3.3.11 adds ordered pool consumption and active bucket lookup, with matching HTTP endpoints for server-to-server integrations.
• Product lists show key configuration signals: The product admin now surfaces auto trial, inventory, and subscription group status directly in the list, including the subscription group code when configured.
• Numeric entitlement keys are safer to configure: Product setup now guides teams to keep subscription-cycle keys consistent inside a subscription group and prevents the same numeric key from being reused across conflicting product scopes in the same app.

v3.4.0 Custom Recharge, Refund Records & Admin Search

• Custom amount recharge is now available for credit products: Admins can configure per-currency minimums, maximums, steps, and conversion rates, while hosted checkout and SDK integrations can let users enter the exact recharge amount they want.
• Checkout enforces recharge limits on the server side: Hosted checkout, embedded PayPal, and SDK-created orders now use the product configuration to validate custom amounts before payment and grant the correct numeric entitlement after payment.
• Refund records are easier to audit: Admin refunds and PayPal/provider refund webhooks now keep structured refund records, and admins can backfill missing refund records for older refunded orders.
• Order admin search is more precise: The order list now separates merchant order ID, user nickname, and provider transaction ID filters, making reconciliation and support investigations faster.
• Payment operations are safer and clearer: Hosted/API order creation rejects raw card data, checkout proxy redirects are more stable, and product status can be toggled directly from the product list.

v3.3.0 Embedded Login, App Sharing & Callback Reliability

• SDK login now opens in an embedded modal by default: Integrations can keep phone and WeChat login inside the page, while Google and Apple authorization still use a provider popup when required by the provider.
• Phone SMS login is ready for hosted sign-in: Users can complete phone-number sign-in and binding, and admins can test SMS providers and review delivery records from the login admin area.
• Apps can be shared across teams more safely: Payment apps and providers now support sharing workflows, making it easier to collaborate without duplicating app configuration.
• Admin operations are easier to audit: The payment admin now includes richer reporting, clearer merchant order identifiers, and product-code validation before products go live.
• Payment callbacks and webhooks are more reliable: Provider webhook delivery, callback result pages, refund channel handling, and Stripe/PayPal order metadata are more consistent across hosted and API integrations.

v3.2.0 HTTP Integration Docs & Safer Hosted Login Returns

• New HTTP integration docs track: You can now follow a full API-first guide for authentication, payment orders, login verification, webhooks, and launch checklist without using the SDK wrapper.
• Hosted login completes more reliably: OAuth sign-in now lands on a dedicated result page that confirms the final attempt state there, helping popup and embedded login flows finish more consistently.
• Shared callback domains are easier to deploy: Hosted login can now keep the correct return domain and prefixed API path when callbacks run behind Nginx or a shared passport domain, reducing broken post-login redirects.
• PayPal checkout now follows the unified order pipeline: Embedded PayPal flows now use the same order creation rules as the main checkout flow, helping keep pricing, validation, and subscription eligibility checks more consistent.

v3.1.0 Subscription Upgrades & Hosted Flow Improvements

• Subscription upgrades now show prorated credit: Hosted checkout can now calculate a credit from the remaining time on an active subscription and apply it to a higher-tier plan, so users see a clearer amount due before they pay.
• Upgrade restrictions are clearer: Rebuying the same subscription tier or moving to a lower tier is now blocked with explicit messaging, helping avoid accidental duplicate or downgrade purchases in hosted checkout.
• Hosted login finishes more reliably: OAuth callbacks now return to the hosted connect page to resolve the final login state there, reducing confusing callback mismatches and making sign-in completion more consistent.
• Portal users are easier to match across login, payment, and admin: Integrations now have clearer guidance for reusing the same platform user ID, and the admin order view can show the linked registered account when one is available.
• Entitlement expiry and upgrade replacement are more accurate: Subscription changes now clean up expired access more safely, keep admin displays closer to the real active state, and apply upgraded subscription entitlements more predictably.
• New hosted theme option: Hosted login and checkout now support a new minimal monochrome theme option for teams that want a cleaner visual style.

History

• App configuration became the shared subject for payments, login, products, and entitlements.
• Hosted checkout, SDK order creation, and order status lookup formed the basic payment loop.
• Hosted login, Webhooks, and entitlement grants gradually joined the same developer service flow.