FloPay SDK Changelog

v1.8.12 - Reliable Google Pay callback settlement #

Flopay SDK 1.8.12 settles wallet authorization before Google Pay's callback deadline, uses Stripe's supported Express Checkout confirmation contract, and safely resumes confirmed wallet handoffs.

Flopay SDK v1.8.12 prevents Google Pay from remaining open until it displays CALLBACK_TIMED_OUT. Wallet authorization now has one bounded lifecycle that settles the provider callback before Google's hard deadline and keeps late work from creating duplicate payment activity.

What changed

• Wallet authorization now has a 25-second SDK budget, leaving five seconds of headroom under Google Pay's 30-second callback deadline.
• Every validation, cancellation, decline, transport, provider, and timeout outcome fails the active wallet callback at most once with safe retry copy.
• Flo-owned session-intent requests receive the authorization cancellation signal. Pre-intent work that completes after cancellation cannot continue to provider confirmation or checkout processing.
• PaymentIntent and SetupIntent wallets now use Stripe's supported confirmPayment and confirmSetup calls with the active Express Checkout Elements instance. The confirmed provider intent supplies the PaymentMethod forwarded to checkout processing.
• Missing wallet identity is collected outside the active provider callback. The current attempt fails promptly and the buyer reopens the wallet after supplying the required email.
• A short-lived, single-consumer checkpoint resumes a confirmed wallet intent if the browser is interrupted between provider confirmation and /process, without creating another provider intent.
• Privacy-safe performance and timeout telemetry identifies the stalled wallet phase, elapsed callback time, and wallet category without buyer details, payment data, provider payloads, or session credentials.

Why it matters

An unresolved Google Pay callback could leave the provider sheet blocking the checkout until Google timed it out, while the checkout remained pending with no intent or transaction. The bounded callback contract now gives the buyer an immediate retry path, prevents canceled pre-intent work from continuing, and still completes an intent that Stripe had already confirmed.

Developer notes

• Upgrade the @flopay/* packages you use to 1.8.12 together.
• Existing checkout and callback APIs are unchanged.
• Version 1.8.11's single /process request and authenticated session-read reconciliation remain the recovery contract after processing begins.
• Google Pay wallet changes should follow the real-device release smoke checklist in docs/WALLET_DOMAIN_VERIFICATION.md.