Adds safer debug logs for failed Glin API requests. Debug logging remains disabled\nby default and does not include card tokens, CPF\/CNPJ, email, phone, or address\nvalues.<\/p>","0.1.4":"
Improves checkout errors when an order amount is outside Glin's supported API\nrange.<\/p>","0.1.3":"
Fixes webhook signature verification. Earlier versions rejected every Glin webhook as\nhaving an invalid signature, so paid orders were never marked paid automatically.\nUpdate as soon as possible.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3669205,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3669205,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256},"icon.svg":{"filename":"icon.svg","revision":3659387,"resolution":false,"location":"assets","locale":false}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.1.8"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[11475,6593,1887,49349,286],"plugin_category":[45],"plugin_contributors":[276843],"plugin_business_model":[],"class_list":["post-338028","plugin","type-plugin","status-publish","hentry","plugin_tags-credit-card","plugin_tags-payment-gateway","plugin_tags-payments","plugin_tags-pix","plugin_tags-woocommerce","plugin_category-ecommerce","plugin_contributors-lucianoglin","plugin_committers-lucianoglin"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/glin-payments-for-woocommerce\/assets\/icon.svg?rev=3659387","icon":"https:\/\/ps.w.org\/glin-payments-for-woocommerce\/assets\/icon.svg?rev=3659387","icon_2x":false,"generated":false},"screenshots":[],"raw_content":"\n
Glin Payments for WooCommerce adds Glin as a WooCommerce payment gateway. It lets Brazilian shoppers pay in BRL using card or PIX while the WooCommerce order remains in the merchant settlement currency supported by Glin.<\/p>\n\n
The plugin loads the official Glin Checkout SDK automatically, sends tokenized payment data from WordPress to Glin with the merchant API key, and reconciles final order state through signed Glin webhooks. Merchants do not need to configure a custom SDK URL.<\/p>\n\n
Main capabilities:<\/p>\n\n
Requirements:<\/p>\n\n
This plugin connects to Glin services to process payments and keep WooCommerce orders synchronized with Glin payment status.<\/p>\n\n
Service provider: Glin Brasil Servicos Digitais LTDA and Glin, INC.<\/p>\n\n
Service endpoints used by the plugin:<\/p>\n\n
https:\/\/sdk.glin.com.br\/v1\/glin-checkout.js<\/code> loads the Glin Checkout SDK in the shopper browser when Glin is available at checkout.<\/li>\nhttps:\/\/pay.glin.com.br<\/code> is used by the WordPress server in Live mode.<\/li>\nhttps:\/\/pay.staging.glin.com.br<\/code> is used by the WordPress server in Sandbox mode.<\/li>\n<\/ul>\n\nData sent to Glin and when it is sent:<\/p>\n\n
\n- When checkout is prepared, the plugin sends the WooCommerce cart amount, currency, generated checkout reference, success URL, and cancel URL so Glin can create or reuse a remittance.<\/li>\n
- When the shopper submits payment, the plugin sends the Glin remittance ID, selected payment method, tokenized card data or PIX request data, installments when applicable, billing name, email, phone, CPF\/CNPJ, and billing address so Glin can process the payment.<\/li>\n
- When payment status is checked, the plugin sends the Glin remittance ID and public checkout key so Glin can return the current payment status.<\/li>\n
- When gateway settings are saved and the store URL is public HTTPS, the plugin sends the WooCommerce webhook URL and subscribed event types so Glin can deliver payment status updates to the store.<\/li>\n
- Glin sends signed webhook events back to the WooCommerce store webhook URL when a remittance is paid, canceled, expired, delivered, or disbursed.<\/li>\n<\/ul>\n\n
Terms of service: https:\/\/www.glin.com.br\/legal\/terms<\/p>\n\n
General platform terms: https:\/\/www.glin.com.br\/legal\/general-terms<\/p>\n\n
Privacy policy: https:\/\/www.glin.com.br\/legal\/privacy<\/p>\n\n\n
\n- Install and activate WooCommerce.<\/li>\n
- Install this plugin from Plugins > Add New, or upload the plugin ZIP from Plugins > Add New > Upload Plugin.<\/li>\n
- Activate Glin Payments for WooCommerce.<\/li>\n
- Open WooCommerce > Settings > Payments.<\/li>\n
- Enable Glin.<\/li>\n
- Choose Sandbox or Live mode.<\/li>\n
- Enter the matching Glin API key and public checkout key.<\/li>\n
- Choose the payment methods to expose, then save settings.<\/li>\n<\/ol>\n\n
After settings are saved, the plugin attempts to register the store webhook with Glin. Local HTTP stores can still test checkout flows, but webhook registration requires a public HTTPS URL.<\/p>\n\n\n
\nCan this plugin be used without WooCommerce?<\/h3><\/dt>\nNo. This is a WooCommerce payment gateway. WordPress can install the plugin, but checkout functionality requires WooCommerce to be installed and active.<\/p><\/dd>\n
Does the merchant need to configure an SDK URL?<\/h3><\/dt>\nNo. The plugin uses Glin's configured Checkout SDK URL internally.<\/p><\/dd>\n
Does the plugin support sandbox testing?<\/h3><\/dt>\nYes. Merchants can choose Sandbox mode and enter sandbox API\/public checkout keys.<\/p><\/dd>\n
How do webhooks work?<\/h3><\/dt>\nWhen gateway settings are saved, the plugin attempts to register the WooCommerce store webhook URL with Glin. Glin sends signed payment\/remittance events to that URL. The plugin verifies the signature, finds the WooCommerce order by stored Glin identifiers, and updates the order status idempotently.<\/p><\/dd>\n
What happens if a webhook is delayed?<\/h3><\/dt>\nThe plugin also polls pending order-received pages and schedules bounded WordPress cron reconciliation for orders left waiting.<\/p><\/dd>\n\n<\/dl>\n\n\n
0.1.8<\/h4>\n\n\n- Load the checkout styles and the payment-status script on the My Account order page too.\nA pending PIX order shown there had an unstyled QR code and a status line that said it\nwas waiting for confirmation but never updated, because nothing was polling it.<\/li>\n<\/ul>\n\n
0.1.7<\/h4>\n\n\n- Stop the PIX QR code filling the whole column on desktop. The size was set on the image,\nand Elementor's
.elementor img { max-width: 100% }<\/code> is a more specific selector, so it\nwon and the code stretched to the width of the page. The QR code is now sized by a\ncontainer of its own, which a theme has no reason to restyle.<\/li>\n<\/ul>\n\n0.1.6<\/h4>\n\n\n- Fix classic checkout never sending payment data. WooCommerce dispatches\n checkout_place_order_ with
triggerHandler()<\/code>, which does not bubble, so the\nhandler bound on document.body<\/code> never ran and orders were placed with an empty payload\nand immediately failed with \"Glin payment was not ready.\"<\/li>\n- Bind the place-order handler to
form.checkout<\/code> directly and re-bind it after each\ncheckout update.<\/li>\n- Fix every card payment failing with \"This remittance is not available for the current\ncheckout session.\" The
{remittanceId}<\/code> placeholder in the prepare endpoint URL was\nstripped by esc_url_raw()<\/code>, so the request went to a literal remittanceId<\/code> path.\nAffected both classic and block checkout.<\/li>\n- Send the billing phone in E.164 when preparing a payment. WooCommerce stores whatever\nthe shopper typed, and the unnormalized value was rejected, so card payments could not\nget past the prepare step. The pay request already normalized; prepare did not.<\/li>\n
- Stop mangling phone numbers in area code 55, and accept a phone written with the\nnational trunk \"0\" before the area code. Brazil's country code and the Santa Maria area\ncode are the same two digits, so testing for a \"55\" prefix removed those shoppers' area\ncode instead of adding the country code and their payments were rejected. Length tells\nthe two apart once the trunk \"0\" is stripped.<\/li>\n
- POST the 3D Secure challenge with its
creq<\/code> field instead of opening the ACS URL as a\nplain link. EMV 3DS 2.x answers a bare GET with an error page. Falls back to a link when\nthe provider sends no creq<\/code>.<\/li>\n- Treat an expired or canceled remittance as terminal. A checkout abandoned before any\norder exists reports only
remittanceStatus<\/code>, so orders previously stayed in \"pending\npayment\" forever and consumed every reconciliation attempt.<\/li>\n- Keep polling for payment confirmation for the full 32 minutes a PIX code can be paid in,\nup from 6, and tell the payer when the page stops watching instead of leaving \"Waiting\nfor payment confirmation\" on screen forever.<\/li>\n<\/ul>\n\n
0.1.5<\/h4>\n\n\n- Log sanitized Glin API failure context to WooCommerce logs when debug logging is\nenabled.<\/li>\n
- Include request method, endpoint path, status code, safe remittance fields, and\nboolean presence checks for sensitive customer, address, and card payload fields.<\/li>\n
- Keep card tokens, device fingerprints, CPF\/CNPJ, email, phone, and full address\nvalues out of plugin logs.<\/li>\n<\/ul>\n\n
0.1.4<\/h4>\n\n\n- Validate WooCommerce order totals against the Glin merchant API amount range before\ninitializing checkout.<\/li>\n
- Replace raw API validation text with a shopper-safe order amount message.<\/li>\n<\/ul>\n\n
0.1.3<\/h4>\n\n\n- Verify the webhook JWS over the raw request body, as required by the unencoded\ndetached payload form (RFC 7797). Earlier versions base64url-encoded the body first\nand rejected every valid signature.<\/li>\n
- Check the protected header claims before trusting a webhook:
alg<\/code> is RS256, b64<\/code> is\nfalse, aud<\/code> matches the integration account, and kid<\/code> names a key in Glin's JWKS.<\/li>\n- Send the API key as a Bearer token when fetching the JWKS, which that endpoint requires.<\/li>\n<\/ul>\n\n
0.1.2<\/h4>\n\n\n- Remove screenshot captions until matching WordPress.org screenshot assets are available.<\/li>\n<\/ul>\n\n
0.1.1<\/h4>\n\n\n- Initial pilot release of the Glin WooCommerce gateway.<\/li>\n<\/ul>","raw_excerpt":"Accept Brazilian card and PIX payments through Glin in WooCommerce.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/338028","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=338028"}],"author":[{"embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/lucianoglin"}],"wp:attachment":[{"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=338028"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=338028"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=338028"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=338028"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=338028"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ur.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=338028"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}