Overview
VibeFox CorvusPay Gateway adds card payments through CorvusPay (Croatia) to Magento Open Source and Adobe Commerce. The customer chooses CorvusPay at the payment step and clicks Place Order. Magento places the order in Pending Payment, and the customer is sent to the secure CorvusPay payment page with a signed form, pays by card there and comes back to your store. Card data never touches your site. The order is invoiced only after CorvusPay confirms the payment, and the order e-mail is sent only then.
It suits Croatian and other stores that accept cards with a CorvusPay merchant account, in EUR or another of the 20 currencies CorvusPay supports. The payment is confirmed when CorvusPay returns the customer to the signed Success URL; there are no server-to-server notifications. The module has no refunds, captures or voids from Magento (do them in the CorvusPay Merchant Center), no saved cards, subscriptions, installments or on-site card form, and no payments for orders created in the Admin.
Key features
Signed payment form: the form sent to CorvusPay is signed with your Secret Key (HMAC-SHA256 over all fields), CorvusPay API version 1.4. The order total is sent in the order currency, with the billing details to pre-fill the payment page.
Paid only when CorvusPay confirms: the order is invoiced only after the signature of the Success URL request is verified with the Secret Key of the store (test or live) the payment was started in. An empty Secret Key never validates.
Amount and currency check: the paid amount and currency are compared with the order. A mismatch puts the order On Hold with a note not to ship before verifying, and no invoice is created.
No double processing: a refreshed or repeated Success request never invoices an order twice. A second payment for a cart that is already paid only adds a note asking you to refund the duplicate.
Sale or Authorize only: charge the card at once, or reserve the amount and capture it later in the CorvusPay Merchant Center while the order waits On Hold.
Cancel gives the cart back: when the customer cancels on the CorvusPay page, the waiting order is cancelled (the stock goes back), the cart is restored and the customer sees a message.
Test and live stores: separate Store ID and Secret Key for each mode; test mode uses the CorvusPay test environment and is marked at checkout.
Standard Magento settings: all settings are on the standard Payment Methods configuration page, with encrypted Secret Keys, the Success and Cancel URLs shown on the page, countries and minimum and maximum order totals, and a log without secrets, signatures or e-mail addresses. The CorvusPay details of each payment are shown in the payment information of the order.
Requirements
Magento Open Source or Adobe Commerce 2.4.6 to 2.4.9 (your own server or Adobe Commerce on cloud infrastructure; not Adobe Commerce as a Cloud Service), PHP 8.1 to 8.4. A CorvusPay merchant account with the Store ID and Secret Key of the test and the production store, and the Success and Cancel URLs entered in the CorvusPay Merchant Center. A VibeFox license key from vibefox.net (one key per domain).