OasisPay Checkout for WooCommerce
OasisPay Checkout for WooCommerce lets merchants start a Hosted Checkout payment from WooCommerce and complete the order only after OasisPay confirms the payment.
This first version supports Hosted Checkout only. Virtual account checkout can be added in a later version without changing this payment flow. It works with both the classic WooCommerce checkout shortcode and the WooCommerce Checkout Block.
Security features:
- Server-side API calls only.
- OasisPay secret keys are not sent to browsers.
- Browser returns are verified through OasisPay before an order is marked paid.
- Server-to-server webhooks are verified using X-OasisPay-Signature and X-OasisPay-Timestamp.
- Duplicate webhooks are idempotent because orders are matched by stored OasisPay payment reference.
- Logs are sanitized and do not include secret keys or webhook secrets.
External Services
This plugin connects to the OasisPay API to create hosted checkout sessions, verify payments, process transactions, and receive payment status updates.
The OasisPay service is required for this plugin to function.
Data sent to OasisPay may include:
- Merchant API credentials.
- Order reference.
- Order amount.
- Currency.
- Customer name.
- Customer email address.
- Customer phone number.
- Transaction metadata.
Data is sent only when a customer initiates a payment, when payment verification is performed, or when OasisPay sends a payment status webhook to the merchant site.
OasisPay service: https://oasispayhq.com
Terms of Service: https://oasispayhq.com/legal/terms
Privacy Policy: https://oasispayhq.com/legal/privacy