Redsys Payments (Cards, Bizum, Spain)

Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view

Accept cards and Bizum through Redsys, the TPV Virtual used by most Spanish banks. Signed redirect payments, signed notifications, refunds from the order page, test mode, encrypted keys, log.

What it does

Offers Redsys as a payment method at checkout: the customer is sent to the Redsys payment page (cards, and Bizum where your bank enabled it) and returns to the order.
A second payment method on the same processor opens Bizum directly.
Every payment request is signed (HMAC_SHA512_V2, or HMAC_SHA256_V1 for older terminals); every notification from Redsys is verified before an order is marked paid. The return of the customer to your site never decides anything.
Amount and currency of the notification must match the order. Repeated or late notifications never undo a paid order.
If the customer comes back while the result is still on its way, the order is shown, the cart stays empty (a signed-in customer cannot pay the same cart twice) and the notification settles the order a moment later.
Refunds from the order page (full or partial), or automatically when an order reaches a status you choose. A refund whose answer is lost is never repeated by itself: you confirm it after looking at the Redsys portal.
Terminal keys are stored encrypted; test and live are separate; a “Test connection” button checks merchant code, terminal and key.
A job queue with automatic retries, a log with filters and CSV export.
Multi-Vendor: marketplace owner mode (one Redsys account for the whole marketplace) or one account per vendor.

Compatibility

CS-Cart and Multi-Vendor 4.17.2 to 4.21.x.
PHP 7.4 to 8.3, depending on your CS-Cart version.
Orders in any currency your Redsys terminal accepts (the add-on knows 140 ISO 4217 currency codes, refuses any other code before the customer is sent to the bank, and charges each in its correct minor unit, for example 0 decimals for XOF or JPY and 3 for JOD or KWD).
The queue needs a cron job (a command line or a secret web address; see Configuration).

You need

A Redsys virtual POS (TPV Virtual) from your bank: merchant code (FUC), terminal number and the terminal signing key. Bizum has to be activated on the terminal by your bank. The Redsys test environment needs no contract.

Next steps

Redsys and Bizum are trademarks of their owners; this add-on is not affiliated with or endorsed by Redsys or Bizum.