Session lock during Paytrail payment prevents order errors

A new security enhancement has been added to the AI Commerce platform’s Paytrail integration: the customer session is now automatically locked during the payment process. This prevents situations where the customer could modify the shopping cart, delivery method, or other order-related details that affect the total amount while the payment is in progress.

Thanks to the session lock, order details remain consistent between the online store and the payment service. This helps prevent silent errors where the order could be created with different information in the payment service than what the store expects, potentially leading to payment rejections due to fraud risk.

If the customer attempts to modify the order while the payment is ongoing, the system displays a clear error message instructing them to cancel the payment first. The payment can be cancelled either through Paytrail or via the bank’s own cancel button, after which the session is immediately unlocked and the order can be modified normally.

If the customer closes the bank page without cancelling the payment, the session remains locked for 10 minutes after leaving the online store. During this time, any attempt to modify the order will trigger an error message indicating the remaining wait time.

This improvement reduces the risk of misuse and accidental orders, enhancing both the security of the payment process and the overall customer experience.