VibeFox CorvusPay for WooCommerce

Overview

VibeFox CorvusPay Gateway adds card payments through CorvusPay (Croatia) to WooCommerce. At checkout the customer is sent to the secure CorvusPay payment page with a signed form, pays by card there and is returned to your store. Card data never touches your site.

It suits Croatian and other stores that accept cards with a CorvusPay merchant account, in EUR or another of the 20 currencies CorvusPay supports. The order is confirmed when CorvusPay returns the customer to the signed Success URL; there are no server-to-server notifications. The plugin has no refunds, captures or voids from WooCommerce (do them in the CorvusPay Merchant Center), no saved cards, subscriptions, installments, IBAN / PIS or CorvusWallet options.

Key features

Signed payment form: the checkout form is signed with your Secret Key (HMAC-SHA256 over all fields), CorvusPay API version 1.4.

Paid only when CorvusPay confirms: the order is marked paid only after the signature of the Success URL request is verified with the Secret Key of the store (test or live) the payment was made in. An empty Secret Key never validates.

Amount and currency check: the paid amount and currency are compared with the order. A mismatch puts the order on hold with a note not to ship before verifying.

No double processing: a refreshed or repeated Success request never completes the order twice, sends no duplicate e-mails and does not reduce stock twice. A second payment for a paid order only adds a note.

Sale or Authorize only: charge the card at once, or reserve the amount and capture it later in the CorvusPay Merchant Center while the order waits on hold.

Cancel keeps the cart: when the customer cancels on the CorvusPay page, the unpaid order is cancelled and the customer returns to the checkout with the cart intact and a message.

Test and live stores: separate Store ID and Secret Key for each mode; test mode uses the CorvusPay test environment.

Modern WooCommerce: classic checkout, Checkout block, the Pay for order page, HPOS. Optional log without secrets, signatures or customer data. Croatian translation included.

Requirements

WordPress 6.0 or later, WooCommerce 7.0 or later, PHP 8.0 or later. A CorvusPay merchant account with the Store ID and Secret Key of the test and the production store, and the Success and Cancel URLs entered in the CorvusPay Merchant Center. A VibeFox license key from vibefox.net (one key per domain).