Starting November 18, 2021, reCAPTCHA validation will be required whenever a customer manually adds a new card to your store’s My Cards page.
This also means that there are improvements to the My Cards API endpoint.
This change is important because it dramatically reduces the likelihood of attacks on the My Cards flow. However, this has no impact on your customers’ shopping experience, since it does not affect the Checkout flow in any way.
What needs to be done?
If your store uses our native UI on the My Cards page, the change should happen automatically. In this case, we expect no action will be required, but we recommend that you review the page layout, to make sure it works properly.
Note that in order to test this validation on your store, you must access it from the public address (without the myvtex environment), using a common user profile, without store administrator or developer privileges.
If your store contains any UI implementation that communicates directly with this API endpoint, please get in touch with our support team to update your implementation accordingly.