Authorize.Net CIM with Recurring Profiles for Magento

• Updated Authorize.net SSL certificate authorities for the upcoming DigiCert SSL Certificate Migration.
• Added Accept.js fields to SOAP API card create/update.
• Fixed error handling around legacy CIM card importing.

• Updated Authorize.Net certificate authorities for changed sandbox SSL.
• Clarified currency handling.
• Improved performance of Manage Cards with many cards and orders.
• Fixed Accept.js nonce handling on payment step AJAX reload.
• Fixed field validation stripping dashes from addresses.
• Fixed non-digit characters throwing off last4 numbers on checkout submit with Accept.js.
• Fixed possible API error with empty or extended-characters-only product names.
• Fixed shipping address not being sent on reauthorization transactions.

• Added protection to frontend My Payment Data page to help prevent abuse. (Will now require order history to use, and block after numerous failures.)
• Added settings check for corrupted API credentials.
• Added support for browser CC autofill.
• Added support for pulling expiration date and CC BIN from the CIM API.
• Fixed legacy card handling when migrating from Hosted CIM.
• Fixed multishipping checkout when adding a new card with Accept.js enabled.
• Fixed possible Accept.js error with CCV disabled.
• Fixed possible PHP error on checkout failure with Accept.js enabled.
• Modified legacy card importer to pull expiration date.

• Fixed errors caused by Accept.js nonce format change.
• Fixed possible issues with AFDS hold-for-review.
• Fixed possible checkout JS errors if Magento JS translator is not present.
• Fixed problems with SOAP API calls when running in WSI mode.
• Fixed unintended card validation on update of a duplicate card on checkout.

• Added 'save info' payment action to save payment info on checkout without authorizing or capturing funds.
• Improved Accept.js user experience. Errors and behavior will be better communicated, and 'two clicks to submit' behavior should be eliminated.
• Improved Accept.js compatibility with some one-step-checkout extensions.
• Fixed exceptions when billing multiple orders with address changes in a single request.
• Fixed unintended extra card validation on update of a duplicate card on checkout.

• Fixed PHP error on checkout decline.
• Fixed tokenbaseDeleteCard API call.

• Fixed Accept.js invalid token errors on card resync during capture.
• Fixed Accept.js invalid token errors on edit and reorder.
• Fixed Accept.js token expiration if on checkout review more than 15 minutes.
• Fixed Accept.js rejecting separators in CC numbers.
• Fixed Accept.js error messages to go through Magento's JS translation.
• Fixed a card synchronization issue when a checkout error happens after updating billing address.
• Fixed possible PHP warning if TokenBase module is enabled without any TokenBase payment method.
• Changed CCV fields to apply to transaction when Accept.js is enabled.
• Added multi-line street support to My Payment Data.

• Added Accept.js support.
• Fixed a potential error on the payment settings page during certain error cases.
• Fixed ACH stored-card transactions (checkout and card edit).

• Added 3D Secure support during checkout for Verified by Visa and MasterCard SecureCode, via Mage_Centinel.
• Fixed a potential error on partial invoice with failed or disabled reauthorization.
• RP: Improved performance of recurring profile updates during checkout under large scale (thanks Bob).

• Fixed compatibility issues with CE 1.5.
• Fixed adding a new card on checkout that was previously stored failing to restore it as active.
• Fixed voiding a partially-invoiced order with reauthorization disabled potentially canceling a valid capture.
• Fixed AmEx cards potentially being misidentified.

• Fixed a compatibility issue with PHP 5.2.
• Fixed gateway errors during reauthorization preventing online capture of the remainder.
• Fixed adding a new card on the card management page that was previously stored failing to restore it as active.
• Changed refund API call to use createTransaction.
• Changed transaction update (fetch) to maintain consistent data keys for integration purposes.

• Improved fetch transaction details update functionality. (Get latest data from Authorize.Net via 'Fetch' on the transaction page.)
• Fixed reauthorization void (triggered by some order editing modules).
• RP: Added recurring profile support for the min/max order value settings.

• Fixed duplicate cases not being identified when customerPaymentProfileId is returned in the response, resulting in a card never being updated with new info (expiration date) during checkout.
• Fixed the card merge process such that the new data is retained rather than the old data, when handling duplicate cards.

• Fixed errors on duplicate payment profile following an API change.
• Fixed an error when refunding orders placed prior to 2.2.0.
• Fixed an upgrade error with the added index.

• Added new Authorize.Net 'createTransaction' API call, with numerous benefits.
• Added a setting to disable reauthorization on partial invoice.
• Added a setting to control whether the 'save card' checkbox is selected on checkout.
• Added new SSL certificate authorities per the Authorize.Net production changes.
• Improved Magento order transaction handling, for better void behavior and access to transaction info from the Magento Admin order pages.
• Improved error handling for card edits.
• Improved shipping address handling (no longer a separate request; won't cause problems if address changes during order processing).
• Improved legacy data migration via an index on sales_flat_order.ext_customer_id.
• Changed gateway to use the new Akamai endpoint (api2.authorize.net).
• Fixed a potential namespace error during XML parsing.
• Removed gateway timeout on transaction requests, to prevent compounded errors during Authorize.Net performance issues. (15 sec timeout is still present for non-transaction requests.)
• API: Fixed 'updateCard' request not setting customer data on new cards.
• API: Fixed 'updateCard' request not returning the affected card ID.
• API: Fixed 'updateCard' request throwing errors for SOAP, and not working with country restrictions.
• RP: Fixed order confirmation email not sending on the first billing when using custom start dates.

• Added new Authorize.Net 'createTransaction' API call, with numerous benefits.
• Added a setting to disable reauthorization on partial invoice.
• Added a setting to control whether the 'save card' checkbox is selected on checkout.
• Added new SSL certificate authorities per the Authorize.Net production changes.
• Improved Magento order transaction handling, for better void behavior and access to transaction info from the Magento Admin order pages.
• Improved error handling for card edits.
• Improved shipping address handling (no longer a separate request; won't cause problems if address changes during order processing).
• Improved legacy data migration via an index on sales_flat_order.ext_customer_id.
• Changed gateway to use the new Akamai endpoint (api2.authorize.net).
• Fixed a potential namespace error during XML parsing.
• Removed gateway timeout on transaction requests, to prevent compounded errors during Authorize.Net performance issues. (15 sec timeout is still present for non-transaction requests.)
• API: Fixed 'updateCard' request not setting customer data on new cards.
• API: Fixed 'updateCard' request not returning the affected card ID.
• API: Fixed 'updateCard' request throwing errors for SOAP, and not working with country restrictions.
• RP: Fixed order confirmation email not sending on the first billing when using custom start dates.

• Compatibility fix for Magento patch SUPEE-6285.
• Fixed AVS/CCV response status being overwritten by follow-up transactions, going forward.
• Fixed partial invoicing reporting the order tax rather than invoice tax amount.
• Fixed refund reporting the order shipping rather than credit memo shipping amount.
• Fixed a configuration scope issue on admin customer card create/edit.

• Fixed billing address changes during checkout not being synced to the gateway.
• Fixed card code potentially being sent on prior-auth capture requests (with custom solutions).
• Fixed transaction ID potentially being sent on auth requests (with custom solutions).
• Fixed a layout issue with ACH when no records are stored.
• Fixed card edit failures sometimes not remembering input data.
• Fixed billing address street not sending the second or later lines (thanks Hank).
• Fixed legacy data conversion to pull profile_id from payment info if possible.
• Fixed unhelpful error message if CIM shipping address is unknown (IE, after changing accounts).
• Improved card validation when editing an existing stored card.
• RP: Fixed profiles being set to suspended on any failure regardless of the suspension threshold setting
• RP: Fixed duplicate confirmation email on purchase.
• RP: Fixed card address changes not syncing to recurring profiles.
• RP: Fixed 'is nominal order' check on admin order form.
• RP: Changed RP behavior to always fail on initial payment error, to prevent undesired behavior when allowed through.

Be sure to update any copies of our templates when upgrading to this version! Failure to do so will break checkout.

• Added ACH (eCheck) support.
• Improved security of stored card use via card hashes, and fixed errors with some integrations caused by previous security checks.
• Improved error handling during checkout to send the user back to the payment info step when appropriate.
• Improved handling of stored card data that is missing or invalid.
• Fixed 'no direct response' error message when encountering a missing CIM profile.
• Fixed broken expired-auth capture (regression in 2.0.2).
• Fixed a potential error on 'My Payment Data' page if the breadcrumbs block was removed from theme.
• Fixed a potential error during checkout on CE 1.7 with VAT group change enabled (thanks Laura).
• Fixed a potential notice and error for certain cases (including only free items).
• Fixed missing cc_type for legacy stored cards using transaction response data.
• Fixed potentially sending an invalid shipping address to CIM in some circumstances.
• Fixed invalid characters in item names being sent to Authorize.Net.
• Fixed missing 'company' field in My Account, and sending of company to Authorize.Net.
• RP: Added support for custom options with recurring profiles (Magento core bug/oversight).
• RP: Fixed RP edit form and shipping address changes.
• RP: Fixed RP card permissions for guest checkout.
• RP: Fixed errors on RP edit if original shipping address no longer exists.

• Fixed potentially voiding the wrong transaction when refunding a partial order before settling.
• Fixed errors when sending orders with more than 30 line items to Authorize.Net (cuts off at 30 now).
• Fixed handling and logging of 'unknown profile' errors.
• Fixed a compatibility issue with advanced settings in Magento CE 1.5 and 1.6.
• Fixed a potential payment methods page filename error when upgrading from CIM 1.4 to 2.0.
• Fixed unrelated cards potentially being shown on admin customers if a quote is in session.
• Fixed customers created from the admin panel loading with the wrong config scope.
• Fixed potential validation errors when editing customers and no default country configured.
• Fixed admin controller using improper AJAX responses.
• Improved logging and safety of install/update scripts.
• Added a setting to disable archived card pruning.
• Added additional logging for card load failures.
• RP: Fixed indefinite recurring profiles not billing properly.
• RP: Fixed a layout output error on admin RP edit pages

• Fixed credit card validation rejecting expiration dates in the current year. (Important)
• Fixed a calculation error with line item discounts.
• Fixed inability to save cards from My Account if payment method is only active for certain countries.
• Fixed card save error messages not being communicated properly in all situations.
• Fixed the form not remembering entered data in My Account when certain errors occur on save.
• Fixed an address validation compatibility error with Magento CE 1.5-1.6.
• Fixed a date compatibility error with Magento CE 1.5.
• Fixed a setup compatibility error with Magento CE 1.5.
• Modified payment method to better handle an invalid data situation.
• RP: Fixed in_trial check to ensure all necessary data is present.

• Fixed guest cards displaying in the admin panel when creating a new customer order, or editing a guest order.
• Fixed the card management tab displaying in the admin panel when creating a new customer.
• Fixed an error in API schema (WSDL).
• Fixed an error preventing online cancel of authorization in CE 1.7 and prior.
• Fixed a compatibility error with PHP 5.2.
• Fixed a compatibility error with OneStepCheckout and guest checkout.

• Fixed guest cards displaying in the admin panel when creating a new customer order, or editing a guest order.
• Fixed the card management tab displaying in the admin panel when creating a new customer.
• Fixed an error in API schema (WSDL).
• Fixed an error preventing online cancel of authorization in CE 1.7 and prior.
• Fixed a compatibility error with PHP 5.2.
• Fixed a compatibility error with OneStepCheckout and guest checkout.

• Added storage of token records and associated data on-site, to improve speed, reliability, and potential future features.
• Added proper support for the responsive web design (rwd) theme in CE 1.9.
• Added complete support for Magento's SOAP API (V1 and V2).
• Added ability to send shipping address with transactions (enabled from settings).
• Added ability to send line items with transactions (disabled from settings).
• Added ability to require re-entering CCV with every transaction for better security.
• Added ability to reuse cards on admin edit/reorder, even for guests and unsaved cards (when available).
• Added extensive abstraction and hook points for greater flexibility.
• Added code to automatically void unsettled transactions on complete refund (normally an error).
• Added code to automatically auth+capture when invoicing an expired authorization (normally an error).
• Improved error handling throughout the module, particularly in card management interfaces.
• Improved user experience of forms in numerous ways.
• Improved input validation of all data sent to Authorize.Net per API specifications.
• Improved settings descriptions and such for easier configuration.
• Improved connection diagnostic messages in the settings area to simplify setup.
• Improved response messages shown under payment info in the admin.
• Modified module to store and display card expiration date on-site (not returned by CIM, but allowed by PCI regulations).
• Modified module to use the payment info model for data storage, as expected.
• Modified module to use Magento methods to find the customer IP, as expected.
• Modified duplicate transaction window from 30 seconds down to 15.
• RP: Added setting to configure the billing task schedule (under Settings > Payment Services).
• RP: Added filesystem locking to ensure no duplicate billing during the rebilling task.
• RP: Improved error handling extensively when registering during checkout.
• RP: Fixed address spacing when viewing recurring profiles (core Magento bug).
• Fixed isAvailable check to obey global (parent) methods.
• Fixed improper handling of voided transactions during AFDS payment review (thanks Evan).
• Fixed void button still displaying after transaction was voided.

• RP: Added the ability to change next billing date from the admin panel.
• Added setting to enable or disable the 'save card' checkbox on checkout.
• Added inline API testing in the admin configuration area.
• Added Transaction ID, AVS response, and CCV response to payment information on admin order status pages.
• Added setting to show Authorize.Net branding on checkout.
• Modified the API gateway for a request timeout of 15 seconds.
• Modified the admin customer card management form to use Magento's region library.
• Modified the update feed to only apply on admin pages.
• Modified the 'Manage My Cards' link to avoid conflict with other payment modules.
• Fixed the inability to use deleted cards with changed CVV or expiration date.
• Fixed CVV validation missing from checkout form.
• Fixed an initialization problem with multi-store, multi-account configurations (thanks Anthony).
• Fixed shipping and tax amounts being passed in the local rather than base currency (informational data only).
• Fixed amounts potentially having greater precision than the API maximum.
• Fixed products not being returned to stock upon order cancel.
• Fixed reference errors for some server software.

• RP: Fixed billing failure to suspend profiles instead of cancel (consistent with the setting description).
• Modified frontend 'My Account' form to use Magento region library for states and countries.
• Modified gateway class to strip additional illegal characters.
• Fixed authorize-then-capture billing removing customer cards on invoice.
• Fixed PHP notice on the admin order form.

• RP: Fixed improper store scope on recurring profile view.
• RP: Fixed profiles not being billed in multi-store setups with the default scope disabled.
• RP: Fixed an error on the admin RP status page if the card is unavailable (thanks Kelsey).
• Modified 'Manage My Cards' area to use SSL if available.
• Modified gateway class to detect the directResponse delimiter automatically.
• Modified gateway class to truncate fields at maximum length when necessary.
• Modified payment model to show stored card last4 on the sidebar during checkout.
• Modified payment model to return gateway errors directly.
• Added save option to the admin credit card form.
• Fixed credit card forms to use proper form validation, and cleaned up the code.
• Fixed potential PHP Strict errors.
• Fixed browser autocomplete being enabled on certain credit card fields.
• RP: Fixed potential error when rebilling guest profiles.
• RP: Added handling of generic errors.
• Added IP to transactions sent to Authorize.Net.
• Changed duplicate window from 120 to 30 seconds.
• Modified gateway class to strip commas from input to avoid response errors.
• Fixed admin card management losing track of the customer (card add/delete).
• Fixed a potential recursive loop when trying to bill mismatched profile and payment IDs.
• Fixed a potential layout problem with some custom themes.

• Fixed compatibility issue with Magento's Compilation functionality.
• Added admin notification support for extension updates.

• Fixed an error in the cleanup cron.
• Fixed an error when processing offline refunds.

• Added the option to save or not save a card on checkout (for non-recurring orders).

• RP: Added events sales_order_place_before, sales_order_place_after, recurring_profile_billed, recurring_profile_failed, recurring_profile_created
• Fixed permissions issue on manage my cards page.
• Fixed possible notice from typecasting the CC number.
• Fixed issue with IE8 compatibility on the manage my cards page.
• Fixed MasterCard transactions not being properly identified.
• Modified gateway class to remove any chance of any notice error.
• Modified code for clarity and better multi-store configuration support.
• Modified card update code on checkout for better efficiency.
• Modified payment model to only change the order status on the initial transaction.
• Added support for partial invoicing/capturing.
• Added support for partial refunds (including multiple refunds per invoice).
• Enabled support for multishipping checkout.
• Removed deprecated shipping code.

• RP: Fixed fatal error in billing cron.
• Fixed JS error on admin customer card management.
• Modified checkout process to update billing address on existing cards.
• Modified checkout to not provide the stored card option to guests, for security reasons.
• Added transaction info to additional_information in the payment model, consistent with the default Authorize.Net model for integration purposes.

• Fixed cards not displaying in My Account when customer has no orders.
• Fixed payment module not being accessible in the Admin Panel if not enabled in the default scope (thanks Anthony).
• Removed unused 'merchant email' setting.
• Modified 'order status' setting to include new/pending statuses.

• RP: Fixed error when creating a nominal admin order with 'send email confirmation' checked.
• RP: Fixed recurring orders not sending order confirmations.
• Added code to prevent cards from being modified or deleted while attached to an open order.
• Fixed text strings in 'Manage My Cards' not using the language abstraction.

• RP: Expanded CIM billing information and functionality in the frontend RP status page.
• RP: Replicated frontend RP status page (and the ability to change payment card) in the Admin Panel.
• Added card editing to 'Manage My Cards' frontend area.
• Added 'Manage My Cards' area in the Admin Panel (admins can view/add/edit/delete customer cards).
• Fixed error handling for refunds.
• Fixed potential recursive loop.
• Fixed later transactions not finding the correct email for guest customers.
• Modified 'Manage My Cards' styles to better fit both of the default CE and EE themes.
• Cleaned up old code to use proper Magento methods.
• RP: Fixed error on recurring profile status page if card was deleted.
• Added validation to the public card add/edit form.
• Modified billing method to record the card number and type with the order in Magento.

• RP: Fixed billing error, incorrect condition check on recurring profile length.
• RP: Fixed handling of 'paid' amounts on recurring profile orders, allowing credit memos to be used properly.
• RP: Modified virtual recurring profile orders to complete automatically, as per standard Magento behavior.
• Fixed the inactive setting not behaving as expected.

• RP: Added logging of recurring profile payment errors.
• RP: Fixed a notable bug in the Magento core preventing registration checkout from working with recurring profiles.
• Fixed potential problems regarding missing customer ID or email during the checkout process.
• Fixed potential undefined error on my account RP pages.
• Fixed potential undefined errors in the CIM API class.

• Added code to handle 'not found' CIM profiles after changing between live and test Authorize.Net accounts.
• Added better error handling and notifications on invalid Login ID/Transaction Key.
• Fixed API error with potential undefined parameters.
• Improved the error message on card verification failure.
• Modified payment model to log all transaction results regardless of success/failure.
• Modified countries setting to only show when needed.

• Initial public release.

• RP: Added proper recurring profile edit functionality (change shipping address and payment info).
• RP: Added support for SARP 1.x.
• RP: Modified rebilling process to only auto-invoice if payment action is authorize+capture.
• RP: Fixed time handling with RP next billing date changes.
• Added support for AFDS (fraud review).
• Modified account pages to always force SSL (thanks Robbie).
• Modified 'card in use' logic to only catch pending orders.
• Fixed an initialization error when viewing CIM transactions with the payment module disabled.
• Fixed a validation error on the customer edit form.
• Fixed an error with card saving and partial captures.