Description
OasisPay Checkout for WooCommerce lets merchants start a Hosted Checkout payment from WooCommerce and complete the order only after OasisPay confirms the payment.
This first version supports Hosted Checkout only. Virtual account checkout can be added in a later version without changing this payment flow.
It works with both the classic WooCommerce checkout shortcode and the WooCommerce Checkout Block.
Security features:
- Server-side API calls only.
- OasisPay secret keys are not sent to browsers.
- Browser returns are verified through OasisPay before an order is marked paid.
- Server-to-server webhooks are verified using X-OasisPay-Signature and X-OasisPay-Timestamp.
- Duplicate webhooks are idempotent because orders are matched by stored OasisPay payment reference.
- Logs are sanitized and do not include secret keys or webhook secrets.
External Services
This plugin connects to the OasisPay API to create hosted checkout sessions, verify payments, process transactions, and receive payment status updates.
The OasisPay service is required for this plugin to function.
Data sent to OasisPay may include:
- Merchant API credentials.
- Order reference.
- Order amount.
- Currency.
- Customer name.
- Customer email address.
- Customer phone number.
- Transaction metadata.
Data is sent only when a customer initiates a payment, when payment verification is performed, or when OasisPay sends a payment status webhook to the merchant site.
OasisPay service: https://oasispayhq.com
Terms of Service: https://oasispayhq.com/legal/terms
Privacy Policy: https://oasispayhq.com/legal/privacy
Installation
- Upload the
oasispay-checkoutfolder to/wp-content/plugins/. - Activate “OasisPay Checkout for WooCommerce” from WordPress plugins.
- Go to WooCommerce > Settings > Payments > OasisPay Checkout.
- Enable the gateway.
- Select Test or Live.
- Add the matching OasisPay secret key.
- Copy the displayed Webhook URL.
- In your OasisPay merchant dashboard, create a webhook endpoint with that URL and enable:
- payment.success
- payment.failed
- Paste the webhook secret generated by OasisPay into the plugin settings.
FAQ
-
Does this version support virtual account checkout?
-
No. This version uses OasisPay Hosted Checkout only. Virtual account checkout can be added later as a separate mode.
-
Can a customer redirect mark an order as paid?
-
No. The return handler verifies the payment status with OasisPay before completing the WooCommerce order.
-
What webhook events should be enabled?
-
Enable
payment.successandpayment.failed. The plugin safely acknowledgestransaction.createdbut does not use it to complete orders.
Reviews
There are no reviews for this plugin.
Contributors & Developers
“OasisPay Checkout for WooCommerce” is open source software. The following people have contributed to this plugin.
ContributorsTranslate “OasisPay Checkout for WooCommerce” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
0.1.6
- Update – Bump WooCommerce tested-up-to header to 10.8.1 for QIT validation.
0.1.5
- Update – Bump WordPress and WooCommerce tested-up-to headers for QIT validation.
0.1.4
- Security – Restrict API Base URL to the official OasisPay HTTPS API host.
- Security – Document signed webhook raw-body handling for marketplace scanners.
- Update – Add complete WooCommerce Marketplace metadata and Checkout Blocks compatibility declaration.
0.1.3
- Update checkout payment badge shown in WooCommerce checkout.
0.1.2
- Fix WooCommerce Checkout Block compatibility on sites where the parent Blocks integration exposes protected settings.
0.1.1
- Add WooCommerce Checkout Block support.
- Add bundled OasisPay logo for gateway listings and checkout labels.
0.1.0
- Initial Hosted Checkout gateway for WooCommerce.