CorvusPay

CorvusPay hosted checkout as a Craft Commerce gateway. Two years in production on Croatian stores before this release.

What it does

• Hosted checkout: Commerce opens the purchase, the plugin posts the signed parameter set (amount, currency, order number, installments, cardholder data truncated to the manual's limits) to the CorvusPay wallet. If the site sets Commerce's gatewayPostRedirectTemplate, that template renders the form.
• Verified post-back: CorvusPay posts the result to the plugin's success or cancel action. The HMAC-SHA256 signature is verified, the transaction status is read back from the merchant API over the store's client certificate, and a purchase transaction is recorded on the order.
• Installments: fixed number, flexible (payment_all), tiered by order amount, or dynamic per card brand (payment_all_dynamic + payment_<brand>). One setting, CorvusPay precedence rules respected.
• Refunds from the order's Transactions tab: a full refund voids the transaction, a partial refund lowers the captured amount.
• Settings accept environment variables and aliases for the secret, store ID and certificate paths. Croatian control-panel translations included.

Setup

1. composer require wmd/craft-corvus-pay and install the plugin.
2. Settings → Plugins → CorvusPay: store ID, secret key, test or production URLs, certificate files.
3. Commerce → Gateways → New gateway, type CorvusPay.
4. In the CorvusPay merchant portal enter the two post-back URLs the settings page prints.

Test with the store credentials CorvusPay provides and the test wallet at wallet.test.corvuspay.com.

Requirements

Craft CMS 5.0+, Craft Commerce 5.0+, PHP 8.2+ with curl and SimpleXML.