Merge pull request #3708 from SalesforceCommerceCloud/avinash.W-21430145

kumaravinashcommercecloud · web-flow · commit 7221d943494e · 2026-03-06T16:53:02.000-05:00
@W-21430145: remove 1cc from dev preview
diff --git a/packages/pwa-kit-create-app/CHANGELOG.md b/packages/pwa-kit-create-app/CHANGELOG.md
@@ -2,6 +2,7 @@
 - Add Salesforce Payments configuration to generated projects [#3725] (https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3725)
 - Clear verdaccio npm cache during project generation [#3652](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3652)
 - Add Node 24 support, remove legacy `url` module import. Drop Node 16 support [#3652](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3652)
+- One Click Checkout removed from Developer Preview. When shoppers use passwordless OTP login with one-click checkout, the system saves their shipping and payment information for faster checkout in the future. Security safeguards required: (1) Captcha - Protects the passwordless login from bots. (2) OTP for Email Changes - Verifies identity before an email update, prevents accidental account lockouts from typos, and prevents unauthorized access to saved payment methods.
 
 ## v3.16.0 (Feb 12, 2026)
 - Add new One-Click Checkout configuration [#3609](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3609)
diff --git a/packages/pwa-kit-create-app/assets/bootstrap/js/config/default.js.hbs b/packages/pwa-kit-create-app/assets/bootstrap/js/config/default.js.hbs
@@ -145,8 +145,11 @@ module.exports = {
             appSourceId: '{{answers.project.dataCloud.appSourceId}}',
             tenantId: '{{answers.project.dataCloud.tenantId}}'
         },
-        // Note: this feature is in Developer Preview at this time. To use One Click Checkout,
-        // enable the oneClickCheckout flag and configure private SLAS client. For more details, please
+        // When shoppers use passwordless OTP login with one-click checkout, the system saves their shipping and payment information for faster checkout in the future.
+        //   To maintain security, implement these safeguards:
+        //   1. Captcha - Protects the passwordless login from bots.
+        //   2. OTP for Email Changes - Verifies your identity before an email update, prevents accidental account lockouts from typos, and prevents unauthorized users from gaining access to saved payment methods.
+        // To use One Click Checkout, enable the oneClickCheckout flag and configure private SLAS client. For more details, please
         // check https://github.com/SalesforceCommerceCloud/pwa-kit/releases/tag/v3.16.0
         oneClickCheckout: {
             enabled: false
diff --git a/packages/pwa-kit-create-app/assets/templates/@salesforce/retail-react-app/config/default.js.hbs b/packages/pwa-kit-create-app/assets/templates/@salesforce/retail-react-app/config/default.js.hbs
@@ -145,8 +145,11 @@ module.exports = {
             appSourceId: '{{answers.project.dataCloud.appSourceId}}',
             tenantId: '{{answers.project.dataCloud.tenantId}}'
         },
-        // Note: this feature is in Developer Preview at this time. To use One Click Checkout,
-        // enable the oneClickCheckout flag and configure private SLAS client. For more details, please
+        // When shoppers use passwordless OTP login with one-click checkout, the system saves their shipping and payment information for faster checkout in the future.
+        //   To maintain security, implement these safeguards:
+        //   1. Captcha - Protects the passwordless login from bots.
+        //   2. OTP for Email Changes - Verifies your identity before an email update, prevents accidental account lockouts from typos, and prevents unauthorized users from gaining access to saved payment methods.
+        // To use One Click Checkout, enable the oneClickCheckout flag and configure private SLAS client. For more details, please
         // check https://github.com/SalesforceCommerceCloud/pwa-kit/releases/tag/v3.16.0
         oneClickCheckout: {
             enabled: false
diff --git a/packages/template-retail-react-app/CHANGELOG.md b/packages/template-retail-react-app/CHANGELOG.md
@@ -1,6 +1,7 @@
 ## v9.1.0-dev
 - Add Page Designer Support [#3727](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3727)
 - [Feature] Add Salesforce Payments support in checkout [#3725](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3725)
+- One Click Checkout removed from Developer Preview. When shoppers use passwordless OTP login with one-click checkout, the system saves their shipping and payment information for faster checkout in the future. Security safeguards required: (1) Captcha - Protects the passwordless login from bots. (2) OTP for Email Changes - Verifies identity before an email update, prevents accidental account lockouts from typos, and prevents unauthorized access to saved payment methods.
 - Update jest-fetch-mock and Jest 29 dependencies [#3663](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3663)
 - Add Node 24 support. Drop Node 16 support [#3652](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3652)
 - [Bugfix] Fix error toast for no applicable shipping methods in one-click checkout [#3673](https://github.com/SalesforceCommerceCloud/pwa-kit/pull/3673)
diff --git a/packages/template-retail-react-app/app/routes.jsx b/packages/template-retail-react-app/app/routes.jsx
@@ -81,6 +81,8 @@ export const routes = [
     {
         path: '/checkout',
         component: (props) => {
+            // One Click Checkout: Saves shipping/payment for returning shoppers. Security required:
+            // (1) Captcha for passwordless login, (2) OTP for email changes. See config/default.js for details.
             const enabled = getConfig()?.app?.oneClickCheckout?.enabled
             return enabled ? <CheckoutOneClick {...props} /> : <Checkout {...props} />
         },
diff --git a/packages/template-retail-react-app/config/default.js b/packages/template-retail-react-app/config/default.js
@@ -74,9 +74,12 @@ module.exports = {
             appSourceId: '7ae070a6-f4ec-4def-a383-d9cacc3f20a1',
             tenantId: 'g82wgnrvm-ywk9dggrrw8mtggy.pc-rnd'
         },
-        // Note: this feature is in Developer Preview at this time. To use One Click Checkout,
-        // enable the oneClickCheckout flag and configure private SLAS client. For more details, please
-        // check https://github.com/SalesforceCommerceCloud/pwa-kit/releases/tag/v3.16.0
+        // One Click Checkout: When enabled, shoppers using passwordless OTP login can save shipping
+        // and payment information for faster checkout in the future. To use, enable the flag and
+        // configure private SLAS client. Security safeguards required:
+        // 1. Captcha - Protects the passwordless login from bots (e.g., Cloudflare Turnstile).
+        // 2. OTP for Email Changes - Verifies identity before an email update, prevents accidental
+        //    account lockouts from typos, and prevents unauthorized access to saved payment methods.
         oneClickCheckout: {
             enabled: false
         },
diff --git a/packages/template-retail-react-app/config/mocks/default.js b/packages/template-retail-react-app/config/mocks/default.js
@@ -119,6 +119,8 @@ module.exports = {
             appSourceId: '7ae070a6-f4ec-4def-a383-d9cacc3f20a1',
             tenantId: 'g82wgnrvm-ywk9dggrrw8mtggy.pc-rnd'
         },
+        // One Click Checkout: Saves shipping/payment for returning shoppers. Requires: (1) Captcha
+        // for passwordless login, (2) OTP for email changes. See config/default.js for full notes.
         oneClickCheckout: {
             enabled: false
         },

Original file line number	Diff line number	Diff line change
`@@ -81,6 +81,8 @@ export const routes = [`
`81`	`81`	`{`
`82`	`82`	`path: '/checkout',`
`83`	`83`	`component: (props) => {`
	`84`	`+ // One Click Checkout: Saves shipping/payment for returning shoppers. Security required:`
	`85`	`+ // (1) Captcha for passwordless login, (2) OTP for email changes. See config/default.js for details.`
`84`	`86`	`const enabled = getConfig()?.app?.oneClickCheckout?.enabled`
`85`	`87`	`return enabled ? <CheckoutOneClick {...props} /> : <Checkout {...props} />`
`86`	`88`	`},`