2020.2.x SuiteCommerce Minor Releases: Mandatory TBA for Dev Tools, Extensibility Safe Mode, and Bug Fixes

Overview

The 2020.2.x minor release train (2020.2.1 through 2020.2.7) covers SuiteCommerce (SC), SuiteCommerce MyAccount (SCMA), and SuiteCommerce Advanced (SCA). Two changes have significant developer impact: mandatory token-based authentication (TBA) for all Commerce developer tools and a new Extensibility Layer Safe Mode that flags extensions importing private core modules. The remaining patches address checkout, localization, and Extension Manager bugs.

What Changed

2020.2.4 — Mandatory Token-Based Authentication for Developer Tools

This is the most impactful change in the series. Theme and extension developer tools — the gulp-based CLI used for local development, deployment, and theming — no longer accept NetSuite user credentials. They now require token-based authentication (TBA). This aligns with NetSuite's mandatory 2FA policy for administrator and other highly privileged roles.

• SC implementations: Download and set up the most recent version of the theme and extension developer tools. The updated tools prompt for TBA tokens instead of credentials.
• SCA implementations: You must apply a version-specific patch to your SCA installation before the developer tools will work. The patch procedure differs by SCA version — see Oracle's "Enable Token-Based Authentication" documentation for the correct patch for your release.

2020.2.1 — Extensibility Layer Safe Mode

A new Extensions subtab has been added to the Advanced tab of the SC Configuration record. It exposes an Extensibility Layer Safe Mode toggle. When enabled:

• A warning appears in the browser console at runtime when an extension customizes or imports a core module that is currently allowed but will be disallowed in a future release.
• An error is thrown when an extension customizes or imports a core module that is already disallowed.

Oracle recommends enabling this option so you can identify and refactor extensions that bypass the official Extensibility API layer before those imports are blocked entirely.

2020.2.5 — Item Options Field Relocation (SCMA)

Two configuration fields moved on the Web Site Setup record:

• The "Show only items listed in" checkbox and the Item options and custom transaction column fields config moved from Shopping Catalog tab > Item Options subtab to Advanced tab > Item Options subtab.
• The former Item Options subtab under Shopping Catalog is renamed to Item Options Templates.

This change gives SCMA administrators access to configure field IDs for transaction records that they previously could not reach.

2020.2.5 — Out of Stock Behavior Fix

When both Multi-Location Inventory and Make Inventory Available on Web Site features were enabled, items configured with "Disallow backorder but display out of stock message" were incorrectly going into backorder. This is now fixed.

2020.2.5 — Token-Based Auth for Sandbox Accounts

TBA was not functioning for sandbox accounts. This is corrected — sandbox accounts now support TBA for Commerce developer tools.

2020.2.6 — Guest Checkout Enforcement

When the Customer Registration field on the Web Site Setup record was set to Required, guest shoppers could still erroneously complete checkout and submit purchases. This is now blocked as expected.

Extension Manager SuiteApp (2020.2.3) — CLI Fixes

• gulp extension:local no longer produces a blank shopping page when testing locally.
• gulp extension:deploy --to with a saved authentication token no longer throws unexpected errors.
• Deploying extensions via the 2018.2.1 developer tools no longer fails with unexpected errors.

Additional Bug Fixes Across Releases

• Gift wrapping price was not included on the transaction record (2020.2.5).
• Memorized sales orders (recurring transactions) incorrectly appeared in the My Account transaction list (2020.2.5).
• Multi-language translations entered on the SC Configuration record (Multi-Domain tab, Translations subtab) were not rendering on the site (2020.2.4).
• Maestro credit cards could not be added as payment methods via My Account (2020.2.4).
• Multi-image items displayed incorrect images after add-to-cart when users navigated to other products (2020.2.4).
• Blank page when users with over 1000 open invoices attempted to view invoices in My Account (2020.2.4).
• Multi-language login button disappeared on PDP/PLP when default language was English (CA) (2020.2.3).
• Non-existing page visits threw an internal error instead of a "Page Not Found" message (2020.2.3).
• Gift certificate confirmation emails were not sent to the shopper (2020.2.3).
• Support case emails went to the wrong address when shoppers chose an alternate email (2020.2.3).
• Out-of-stock items still appeared available when reordering from Order History (2020.2.2).
• Same as Shipping checkbox in checkout could not be cleared (fixed in both 2020.2.2 and 2020.2.1).
• CMS landing pages and zones returned 404 errors when the Multi-Language option was disabled (2020.2.1).
• SCA order confirmation displayed a blank page instead of the confirmation (2020.2.6).

What To Do

1. Migrate to token-based authentication immediately. If you are still using user credentials with Commerce developer tools (gulp CLI), they will no longer work as of 2020.2.4. Generate an integration record and TBA tokens in NetSuite, then reconfigure your local developer environment. SCA users must apply the version-specific patch first.
2. Enable Extensibility Layer Safe Mode. Navigate to the SC Configuration record > Advanced tab > Extensions subtab and turn on Safe Mode. Review browser console output for warnings and errors, then refactor any extensions that import or customize private core modules before Oracle blocks those imports entirely.
3. Verify Item Options configuration. If you have scripts or saved searches referencing the Item Options subtab under Shopping Catalog on the Web Site Setup record, note the fields have moved to the Advanced tab > Item Options subtab. The old subtab is renamed Item Options Templates.
4. Update Extension Manager SuiteApp. If you use the SuiteCommerce Extension Manager and have experienced blank pages or deployment failures with gulp extension:local or gulp extension:deploy --to, update to version 2020.2.3 or later of the SuiteApp.
5. Test Out of Stock behavior if you use both Multi-Location Inventory and Make Inventory Available on Web Site. Confirm that items set to "Disallow backorder" now correctly display the out-of-stock message instead of accepting backorders.