Tpay Payments (BLIK, Pay-by-link, cards)

Edition: CS-Cart & Multi-Vendor · Latest version: 1.0.0 · Compatible with: CS-Cart & Multi-Vendor 4.17.2 – 4.21.x, PHP 7.4 – 8.3 · Changelog: view

Accept Tpay payments (BLIK, online bank transfers, cards) on CS-Cart and Multi-Vendor: the customer pays on the Tpay payment page, notifications are verified by JWS signature and checksum, and an order is paid only after the transaction was read back from Tpay.

What it does

Offers Tpay as a payment method at checkout: the customer is sent to the Tpay payment page (BLIK, banks, cards and the other methods enabled on your account) and returns to the order.
Creates the transaction with OAuth 2.0 (/oauth/auth) and the documented POST /transactions request; the order number travels as hiddenDescription and comes back as tr_crc.
Verifies every notification the way Tpay documents it: the JWS signature in X-JWS-Signature (Tpay certificate chain) and the md5sum; it answers exactly TRUE. Notifications are idempotent.
Reads the transaction back (GET /transactions/{id}) and compares amount, currency and reference before the order is marked paid. Lost notification? The customer’s return and a recurring check read it back.
Refunds from the order page (full or partial) with the refund state followed in Tpay’s refund list; or automatically when an order reaches a status you choose.
One payment method per choice: restrict a method to BLIK or to one bank group to show them as separate buttons at checkout.
PLN; other store currencies are converted to PLN when the store has PLN.
Keys are stored encrypted; test (sandbox) and live are separate; a “Test connection” button checks them.
A job queue with automatic retries (5 minutes, 15 minutes, 1 hour, 3 hours, 12 hours) and a log with filters and CSV export.
Multi-Vendor: marketplace owner mode (one Tpay account for the whole marketplace) or one account per vendor in the vendor panel.

Compatibility

CS-Cart and Multi-Vendor 4.17.2 to 4.21.x.
PHP 7.4 to 8.3, depending on your CS-Cart version.
The queue needs a cron job (a command line or a secret web address; see Configuration).

Next steps

Tpay is a trademark of its owner; this add-on is not affiliated with or endorsed by Tpay.