VibeFox CorvusPay for OpenCart

Overview

VibeFox CorvusPay Gateway adds card payments through CorvusPay (Croatia) to OpenCart 3 and OpenCart 4. At the last checkout step the customer clicks Confirm Order, is sent to the secure CorvusPay payment page with a signed form, pays by card there and comes back to your store. Card data never touches your site. OpenCart creates the order before the payment, but the order gets a status only after CorvusPay confirms the payment, so unpaid attempts stay missing orders.

It suits Croatian and other stores that accept cards with a CorvusPay merchant account, in EUR or another of the 20 currencies CorvusPay supports. The payment is confirmed when CorvusPay returns the customer to the signed Success URL; there are no server-to-server notifications. The extension has no refunds, captures or voids from OpenCart (do them in the CorvusPay Merchant Center), no saved cards, subscriptions, installments or on-site card form.

Key features

Signed payment form: the form sent to CorvusPay is signed with your Secret Key (HMAC-SHA256 over all fields), CorvusPay API version 1.4.

Paid only when CorvusPay confirms: the order gets its status only after the signature of the Success URL request is verified with the Secret Key of the store (test or live) the payment was started in. An empty Secret Key never validates. OpenCart then sends its usual order e-mails.

Amount and currency check: the paid amount and currency are compared with the order. A mismatch puts the order in your review status with a note not to ship before verifying.

No double processing: a refreshed or repeated Success request never applies the payment twice. A second payment for an order or a cart that is already paid only adds a note.

Sale or Authorize only: charge the card at once, or reserve the amount and capture it later in the CorvusPay Merchant Center while the order waits in the review status.

Cancel keeps the cart: when the customer cancels on the CorvusPay page, the customer returns to the checkout with the cart intact and a message.

Test and live stores: separate Store ID and Secret Key for each mode; test mode uses the CorvusPay test environment.

CorvusPay tab on the order page: CorvusPay order number, status, transaction type, amount, approval code, transaction and card type. Geo zone, minimum total, your own order statuses and an optional log without secrets, signatures or customer data.

Requirements

OpenCart 3.0.x (tested on 3.0.5.0) or OpenCart 4.0.2 and later (tested on 4.1.0.3), PHP 8.0 or later. One download has the packages for both versions. A CorvusPay merchant account with the Store ID and Secret Key of the test and the production store, and the Success and Cancel URLs entered in the CorvusPay Merchant Center. A VibeFox license key from vibefox.net (one key per domain).