We’ve had a lot of fun diving deeper into the Store and CartThrob communities over the last seven months and want to thank you all for your support and continued use of our products. A significant amount of work has gone into getting up to speed and addressing the most urgent needs in both add-ons.
We are continuing to plan a roadmap for how we can innovate (and quite honestly, overhaul) both in a way that makes them even more useful to the ExpressionEngine community. We have lots of big ideas and are excited to start sharing them with you soon (are you on our email lists for Store and CartThrob yet?).
Currently, the most pressing item is the EU’s Payment Services Directive 2 (PSD 2) and specifically the Strong Customer Authentication (SCA) requirement that officially goes into enforcement on September 14th, 2019. If you’re not familiar with these requirements, we recommend starting here. Otherwise, continue reading to learn about the most recent updates we’ve made to Store and CartThrob in regards to these upcoming requirements and what it means for you.
Exp-resso Store integrates with its payment gateways through the use of Omnipay, a fantastically helpful and widely used PHP library. Unfortunately, because of legacy ExpressionEngine (and consequently legacy PHP) support, Store 4 is currently running the deprecated V2 of Omnipay which is not widely receiving 3D Secure support. V3 of the library does address these needs but has a minimum requirement of PHP 7. In order to support 3D Secure as well as the most modern features and functionality of our supported payment gateways, we will need to move to Omnipay V3. More on how we plan to do that shortly.
CartThrob integrates with all of its payment gateways either through direct cURL requests to the gateway’s API or in some cases via a one-off library not centralized around Omnipay. In order to implement 3D Secure on each of the gateways, we would have to implement the changes to the structure and API interaction for each gateway individually. This is incredibly time-intensive and difficult to maintain, so we are actively working to migrate CartThrob payment gateway interactions to Omnipay V3. This should help us with the immediate SCA requirements as well as continuing to adapt to API changes and new features available for each payment gateway.
As mentioned in the previous section, we are moving both Store and CartThrob to Omnipay V3 and that work has already begun. This transition requires that we have a minimum requirement of PHP 7 and ExpressionEngine 5 to use both Store and CartThrob going forward.
We‘ve heard from a lot of you that you are unable to upgrade from older versions of Store and CartThrob for a variety of different reasons and we have a plan for how to address this for you.
Payment gateway updates (including SCA support for both Store and CartThrob) will be privately released as a V5 Beta. The beta will be freely available to V4 license holders by request until each add-on hits a full V5.0 release. At that time an upgrade fee may be required to receive ongoing updates via the EllisLab Addon Store or our respective add-on sites
Want to be on the V5 Beta list? Send us an email at firstname.lastname@example.org (Store) or email@example.com (CartThrob) with your V4 license code and a quick note stating your desire to receive the V5 Beta and we will put you on our list for releases and updates.
As previously stated, the transition of these two add-ons is a significant undertaking and we will be doing a progressive rollout of payment gateway support based on the usage levels of our customers. The following is our implementation roadmap:
These will make up the entirety of our included payment gateways for the full release of Store V5.0 and CartThrob V5.0. We intend to make other first-party payment gateways available as purchasable add-ons at a small fee and are still working on a final list for what we intend to offer. We will continue to offer custom gateway development for anyone in need of a gateway that is not in our official first-party gateway list.
We understand not everyone is going to be able to update either at all or in time for the SCA requirement and we may be able to help. Send us a message at firstname.lastname@example.org (Store) or email@example.com (CartThrob) with your needs and we will do our best to accommodate your request.
Sign up for email updates for Store and CartThrob. We’ll be sending out announcements on our progress, development roadmap, and releases as they happen. This is the best way to stay in the know on all things Store and CartThrob.