Hellgate Web SDK (v3.10.0)
Cardholder-Aware Token Lifecycles
Align token retention with what your cardholder actually agreed to. A new optionalephemeral?: boolean argument on process() and tokenize() defaults to true,
meaning the cardholder is not remembered. Flip it to false only on explicit
consent — for example, when a customer ticks a “Save my card” box at checkout.Smarter Scheme Validation
Allowed card schemes configured on the session now flow through to client-side card number validation. Cardholders see scheme errors immediately, before the request ever leaves the browser.Improvements and bugfixes
- Empty
card_schemesconfiguration now correctly allows all schemes. - Separate expiry month/year inputs now treat
'1'as a valid month and properly reject past-expiry dates. - Demo: a new “Save my card” checkbox in the tokenization demo wires straight into the new ephemeral toggle so you can try it end-to-end.
Hellgate Web SDK (v3.10.0)
Bug Fixes- validate past expiry date for separate month/year fields
- treat ‘1’ as a valid value for a separate expiryMonth field (‘1’ -> ‘01’)
- pass allowed_schemes from session to card number validation
Hellgate Web SDK (v3.9.0)
Added support to split the expiriy input fields in the Web SDK.Hellgate Web SDK (v3.8.1)
September cleanup and maintenance release for our SDKs.Hellgate Web SDK (v3.8.0)
Validate CVC length based on card scheme in multi-line forms.Hellgate Android SDK (v1.1.0)
The Android SDK now encrypts the full payload — including any additional data — into a single JWE and returns it to your app, instead of calling the tokenization backend directly. This simplifies your integration and keeps sensitive data encrypted end to end.Improvements and bugfixes
- Additional cardholder data is now encrypted as part of the JWE token.
- Hellgate error responses now surface with clearer, more actionable detail.
- Removed support for tokenizing through an external token provider.
- Updated environment URLs.
Hellgate Web SDK (v3.7.0)
Add ‘onSessionComplete’ handler to Hellgate® client with result data.Hellgate Web SDK (v3.5.3)
Improved the SDK with small but important fixes:- Fix masked input behaviour
- Reject cardHandler.process() promise if BE responds 40x / 50x status code
- Await cardHandler.process() throws exceptions if card date is not complete or invalid
- Show full CVC code up to 4 digits
- Card scheme validation by default
- UnionPay card number input
- Encrypt additional_data payload on tokenize
- User can refresh CVC2 code of a token from WebSDK