Strapi plugin for Payone payment gateway integration
npm install strapi-plugin-payone-providerA comprehensive Strapi plugin that integrates the Payone payment gateway into your Strapi application. This plugin provides both backend API integration and an admin panel interface for managing payment transactions.
- Features
- Requirements
- Installation
- Configuration
- Using the Admin Panel
- Apple Pay Setup
- Google Pay Configuration
- Usage
- Base URL
- Common Request Headers
- Common Response Fields
- Payment Methods & Operations
- Credit Card
- PayPal
- Google Pay
- Apple Pay
- SEPA Direct Debit
- Sofort Banking
- TransactionStatus Notifications
- Notes
- Payone API Integration: Full integration with Payone's Server API (v3.10)
- Payment Operations:
- Preauthorization (reserve funds)
- Authorization (immediate charge)
- Capture (complete preauthorized transactions)
- Refund (return funds to customers)
- Admin Panel:
- Easy configuration interface
- Transaction history viewer with filtering
- Payment testing tools
- Connection testing
- Transaction Logging: Automatic logging of all payment operations
- Security: Secure credential storage with masked API keys
Before installing this plugin, ensure you have:
- Strapi:
- Version 5.x.x for plugin version 5.x.x
- Version 4.6.0 or higher for plugin version 4.x.x
- Node.js: Version 18.0.0 to 20.x.x
- npm: Version 6.0.0 or higher
- Payone Account: Active Payone merchant account with API credentials
You will need the following credentials from your Payone account:
1. AID (Account ID): Your Payone sub-account identifier
2. Portal ID: Your Payone portal identifier
3. Merchant ID (MID): Your merchant identifier
4. Portal Key: Your API authentication key (also called "Portal Key" or "Security Key")
> âšī¸ How to get Payone credentials: Log into your Payone Merchant Interface (PMI) and navigate to Configuration â Payment Portals â [Your Portal] â Advanced Tab to find these credentials.
Important: Choose the correct version based on your Strapi version:
- For Strapi 5.x.x: Use plugin version ^5.x.x
- For Strapi 4.x.x: Use plugin version ^4.x.x
``bashnpm
npm install strapi-plugin-payone-provideryarn
yarn add strapi-plugin-payone-providerpnpm
pnpm add strapi-plugin-payone-provider
`
> Version Compatibility: Make sure to install the correct plugin version that matches your Strapi version. Using an incompatible version may cause errors or unexpected behavior.
After installation, you need to configure your Payone credentials:
1. Open Payone Provider in the sidebar menu
2. Go to the Configuration tab
3. Fill in your Payone credentials and save:
- Account ID (AID): Your Payone account ID
- Portal ID: Your Payone portal ID
- Merchant ID (MID): Your merchant ID
- Portal Key: Your API security key
- Mode: Select test for testing or live for production3.10
- API Version: Leave as (default)
4. Click "Test Connection" to verify your credentials
> â ī¸ Important: Apple Pay requires a registered domain with HTTPS. It does NOT work on localhost. For testing, use a production domain with HTTPS or test on a device with Safari (iOS/macOS).
#### Apple Pay Domain Verification File (.well-known)
Apple Pay requires a domain verification file to be placed on your server. This file must be accessible at:
``
https://yourdomain.com/.well-known/apple-developer-merchantid-domain-association
Steps to set up the domain verification file:
1. Download the file from Payone:
- Download the domain verification file from Payone documentation: https://docs.payone.com/payment-methods/apple-pay/apple-pay-without-dev
- Alternatively, log into your Payone Merchant Interface (PMI)
- Navigate to Configuration â Payment Portals â Apple Pay
2. Place the file in Strapi:
- Create the directory: public/.well-known/ (if it doesn't exist)public/.well-known/apple-developer-merchantid-domain-association
- Place the file at:
3. Place the file in your Frontend (if separate):
- Create the directory: public/.well-known/ (if it doesn't exist)public/.well-known/apple-developer-merchantid-domain-association
- Place the file at:
4. Verify accessibility:
- The file must be accessible via HTTPS at: https://yourdomain.com/.well-known/apple-developer-merchantid-domain-association
- Test by visiting the URL in your browser - you should see the file content
> â ī¸ Critical: Without this file, Apple Pay will NOT work on your domain. The file must be accessible via HTTPS and must match exactly what Payone provides.
#### Middleware Configuration for Apple Pay
Apple Pay requires Content Security Policy (CSP) configuration in config/middlewares.js to allow Apple Pay scripts. Without this configuration, Apple Pay will NOT work on your strapi admin for make test transaction.
Required CSP directives:
`javascript`
module.exports = [
"strapi::logger",
"strapi::errors",
{
name: "strapi::security",
config: {
contentSecurityPolicy: {
useDefaults: true,
directives: {
"script-src": [
"'self'",
"'unsafe-inline'",
"'unsafe-eval'",
"https://applepay.cdn-apple.com", // Apple Pay SDK
"https://www.apple.com", // Apple Pay manifest
],
"connect-src": [
"'self'",
"https:",
"https://applepay.cdn-apple.com", // Apple Pay API
"https://www.apple.com", // Apple Pay manifest
],
"frame-src": [
"'self'",
"https://applepay.cdn-apple.com", // Apple Pay iframe
],
},
},
},
},
// ... other middlewares
];
> â ī¸ Important: Without this middleware configuration, Apple Pay scripts will be blocked and Apple Pay will NOT work!
#### Middleware Configuration for Google Pay
Google Pay requires Content Security Policy (CSP) configuration in config/middlewares.js to allow Google Pay scripts. Without this configuration, Google Pay will NOT work on your strapi admin for make test transactions.
Required CSP directives:
`javascript`
module.exports = [
"strapi::logger",
"strapi::errors",
{
name: "strapi::security",
config: {
contentSecurityPolicy: {
useDefaults: true,
directives: {
"script-src": [
"'self'",
"'unsafe-inline'",
"'unsafe-eval'",
"https://pay.google.com", // Google Pay SDK
],
"connect-src": [
"'self'",
"https:",
"https://pay.google.com", // Google Pay API
],
"frame-src": [
"'self'",
"https://pay.google.com", // Google Pay iframe
],
},
},
},
},
// ... other middlewares
];
> â ī¸ Important: Without this middleware configuration, Google Pay scripts will be blocked and Google Pay will NOT work!
All API endpoints are available at:
Content API (Frontend): /api/strapi-plugin-payone-provider
Admin API: /strapi-plugin-payone-provider
> â ī¸ Authentication Required: All endpoints require authentication. Include your Bearer token in the Authorization header.
`javascript`
{
"Content-Type": "application/json",
"Authorization": "Bearer YOUR_AUTH_TOKEN"
}
All responses include:
- status: Transaction status (APPROVED, ERROR, REDIRECT, etc.)txid
- : Transaction ID (for successful transactions)errorcode
- : Error code (if status is ERROR)errormessage
- : Error message (if status is ERROR)
---
This section provides detailed API documentation for each supported payment method. Click on any payment method below to see the full implementation details:
Credit Card Payment Method
#### Preauthorization/Authorization
Endpoints:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "cc",
"cardtype": "V",
"cardpan": "4111111111111111",
"cardexpiredate": "2512",
"cardcvc2": "123",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789",
"userid": "987654321"
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
---
PayPal Payment Method
#### Preauthorization/Authorization
Endpoints:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "wlt",
"wallettype": "PPE",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"shipping_firstname": "John",
"shipping_lastname": "Doe",
"shipping_street": "Main Street 123",
"shipping_zip": "12345",
"shipping_city": "Berlin",
"shipping_country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Response:
`json`
{
"data": {
"status": "REDIRECT",
"txid": "123456789",
"redirecturl": "https://secure.pay1.de/redirect/..."
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1,
"capturemode": "full"
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
---
Google Pay Payment Method
#### Overview
Google Pay integration requires obtaining an encrypted payment token from Google Pay API and sending it to Payone. The token must be Base64 encoded before sending to Payone.
#### Getting Google Pay Token
1. Include Google Pay Script
`html`
2. Initialize Google Pay
`javascript
const paymentsClient = new google.payments.api.PaymentsClient({
environment: "TEST", // or "PRODUCTION" for live mode
});
const baseRequest = {
apiVersion: 2,
apiVersionMinor: 0,
};
const allowedCardNetworks = ["MASTERCARD", "VISA"];
const allowedAuthMethods = ["PAN_ONLY", "CRYPTOGRAM_3DS"];
const tokenizationSpecification = {
type: "PAYMENT_GATEWAY",
parameters: {
gateway: "payonegmbh",
gatewayMerchantId: "YOUR_PAYONE_MERCHANT_ID", // Use your Payone MID or Portal ID
},
};
const cardPaymentMethod = {
type: "CARD",
parameters: {
allowedCardNetworks,
allowedAuthMethods,
},
tokenizationSpecification,
};
const isReadyToPayRequest = Object.assign({}, baseRequest);
isReadyToPayRequest.allowedPaymentMethods = [cardPaymentMethod];
paymentsClient.isReadyToPay(isReadyToPayRequest).then(function (response) {
if (response.result) {
// Google Pay is available, show button
}
});
`
3. Create Payment Button and Get Token
`javascript
const paymentDataRequest = Object.assign({}, baseRequest);
paymentDataRequest.allowedPaymentMethods = [cardPaymentMethod];
paymentDataRequest.transactionInfo = {
totalPriceStatus: "FINAL",
totalPrice: "10.00",
currencyCode: "EUR",
};
paymentDataRequest.merchantInfo = {
merchantId: "YOUR_GOOGLE_MERCHANT_ID", // Optional: from Google Console
merchantName: "Your Merchant Name",
};
const button = paymentsClient.createButton({
onClick: async () => {
try {
const paymentData = await paymentsClient.loadPaymentData(
paymentDataRequest
);
const token = paymentData.paymentMethodData.tokenizationData.token;
// Token is a JSON string, encode it to Base64 for Payone
const base64Token = btoa(unescape(encodeURIComponent(token)));
// Send to your backend
await fetch("/api/strapi-plugin-payone-provider/preauthorization", {
method: "POST",
headers: {
"Content-Type": "application/json",
Authorization: "Bearer YOUR_TOKEN",
},
body: JSON.stringify({
amount: 1000,
currency: "EUR",
reference: "PAY1234567890ABCDEF",
googlePayToken: base64Token,
}),
});
} catch (error) {
console.error("Google Pay error:", error);
}
},
});
document.getElementById("google-pay-button").appendChild(button);
`
Token Format
The token from Google Pay is a JSON string with the following structure:
`json`
{
"signature": "MEUCIFr4ETGzv0uLZX3sR+i1ScARXnRBrncyYFDX/TI/VSLCAiEAvC/Q4dqXMQhwcSdg/ZvXj8+up0wXsfHja3V/6z48/vk=",
"intermediateSigningKey": {
"signedKey": "{\"keyValue\":\"MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7PWUi+e6WPUhNmTSQ2WN006oWlcWy0FtBWizw9sph1wvX9XcXUNRLcfcsmCBfI5IsKQkjAmYxpCSB+L5sIudLw\\u003d\\u003d\",\"keyExpiration\":\"1722393105282\"}",
"signatures": [
"MEUCIQCpU30A3g2pP93IBE5NxgO9ZcJlGF9YPzCZS7H4/IR1CQIgF6+I5t8olT8YsRDUcj7w3R1bvX4ZCcyFXE2+YXa+3H0="
]
},
"protocolVersion": "ECv2",
"signedMessage": "{\"encryptedMessage\":\"...\",\"ephemeralPublicKey\":\"...\",\"tag\":\"...\"}"
}
Important: The token must be Base64 encoded before sending to Payone.
#### Preauthorization/Authorization
Endpoints:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "wlt",
"wallettype": "GGP",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"shipping_firstname": "John",
"shipping_lastname": "Doe",
"shipping_street": "Main Street 123",
"shipping_zip": "12345",
"shipping_city": "Berlin",
"shipping_country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back",
"googlePayToken": "BASE64_ENCODED_TOKEN",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Payone Request Parameters (automatically added by plugin):
`json`
{
"request": "preauthorization",
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "wlt",
"wallettype": "GGP",
"add_paydata[paymentmethod_token_data]": "BASE64_ENCODED_TOKEN",
"add_paydata[paymentmethod]": "GGP",
"add_paydata[paymentmethod_type]": "GOOGLEPAY",
"add_paydata[gatewayid]": "payonegmbh",
"add_paydata[gateway_merchantid]": "YOUR_PAYONE_MERCHANT_ID",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"shipping_firstname": "John",
"shipping_lastname": "Doe",
"shipping_street": "Main Street 123",
"shipping_zip": "12345",
"shipping_city": "Berlin",
"shipping_country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back"
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Required Parameters for Google Pay
- clearingtype: Must be "wlt" (wallet)wallettype
- : Must be "GGP" (Google Pay)add_paydata[paymentmethod_token_data]
- : Base64 encoded Google Pay token (automatically added by plugin)add_paydata[paymentmethod]
- : "GGP" (automatically added by plugin)add_paydata[paymentmethod_type]
- : "GOOGLEPAY" (automatically added by plugin)add_paydata[gatewayid]
- : "payonegmbh" (automatically added by plugin)add_paydata[gateway_merchantid]
- : Your Payone Merchant ID (automatically added by plugin)
- Shipping address parameters (required for wallet payments)
---
Apple Pay Payment Method
#### Preauthorization/Authorization
Endpoints:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "wlt",
"wallettype": "APL",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"shipping_firstname": "John",
"shipping_lastname": "Doe",
"shipping_street": "Main Street 123",
"shipping_zip": "12345",
"shipping_city": "Berlin",
"shipping_country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Response:
`json`
{
"data": {
"status": "REDIRECT",
"txid": "123456789",
"redirecturl": "https://secure.pay1.de/redirect/..."
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1,
"capturemode": "full"
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
---
SEPA Direct Debit Payment Method
#### Preauthorization/Authorization
Endpoints:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "elv",
"iban": "DE89370400440532013000",
"bic": "COBADEFFXXX",
"bankaccountholder": "John Doe",
"bankcountry": "DE",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789",
"userid": "987654321"
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
---
Sofort Banking Payment Method
#### Preauthorization/Authorization
Endpoint:
- POST /api/strapi-plugin-payone-provider/preauthorizationPOST /api/strapi-plugin-payone-provider/authorization
-
Request Body:
`json`
{
"amount": 1000,
"currency": "EUR",
"reference": "PAY1234567890ABCDEF",
"clearingtype": "sb",
"onlinebanktransfertype": "PNT",
"bankcountry": "DE",
"firstname": "John",
"lastname": "Doe",
"email": "john.doe@example.com",
"telephonenumber": "+4917512345678",
"street": "Main Street 123",
"zip": "12345",
"city": "Berlin",
"country": "DE",
"successurl": "https://www.example.com/success",
"errorurl": "https://www.example.com/error",
"backurl": "https://www.example.com/back",
"salutation": "Herr",
"gender": "m",
"ip": "127.0.0.1",
"language": "de",
"customer_is_present": "yes"
}
Response:
`json`
{
"data": {
"status": "REDIRECT",
"txid": "123456789",
"redirecturl": "https://secure.pay1.de/redirect/..."
}
}
#### Capture
Endpoint:
- POST /api/strapi-plugin-payone-provider/capture
Request Body:
`json`
{
"txid": "123456789",
"amount": 1000,
"currency": "EUR",
"sequencenumber": 1
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
#### Refund
Endpoint:
- POST /api/strapi-plugin-payone-provider/refund
Request Body:
`json`
{
"txid": "123456789",
"amount": -1000,
"currency": "EUR",
"reference": "REF1234567890ABCDEF",
"sequencenumber": 2
}
Response:
`json`
{
"data": {
"status": "APPROVED",
"txid": "123456789"
}
}
---
The Payone platform provides an asynchronous way of notifying your system of changes to a transaction. These notifications are called "TransactionStatus" and are automatically handled by this plugin.
TransactionStatus notifications are POST requests sent from Payone's servers to your endpoint when transaction status changes occur. This is especially important for:
- Redirect Payment Methods: Verifying that payments were actually completed (prevents fraud)
- Chargeback Processes: Being notified when customers initiate chargebacks
- Real-time Tracking: Keeping your system updated with the latest transaction status
1. Payone sends notification â Your Strapi endpoint receives POST request
2. Plugin verifies request â Checks IP address, User-Agent, and hash signature
3. Plugin processes notification â Updates transaction history automatically
4. Plugin responds â Returns TSOK to confirm receipt
The plugin automatically provides the TransactionStatus endpoint at:
URL: POST /api/strapi-plugin-payone-provider/transaction-status
No authentication required - The endpoint is secured by:
- IP address verification (only Payone IPs allowed)
- User-Agent verification (must be "PAYONE FinanceGate")
- Hash signature verification (MD5 hash of transaction data)
You need to configure this endpoint in your Payone Merchant Interface (PMI):
1. Log into your Payone Merchant Interface (PMI)
2. Navigate to Configuration â Payment Portals â [Your Portal]
3. Find the TransactionStatus Endpoint setting
4. Enter your endpoint URL: https://yourdomain.com/api/strapi-plugin-payone-provider/transaction-status
5. Save the configuration
> â ī¸ Important: The endpoint must be accessible via HTTPS. Payone will not send notifications to HTTP endpoints.
The plugin automatically verifies:
1. IP Address: Only accepts requests from Payone's IP ranges:
- 185.60.20.0/2454.246.203.105
-
2. User-Agent: Must be exactly "PAYONE FinanceGate"
3. Hash Signature: Verifies MD5 hash using your Portal Key:
``
MD5(portalid + aid + txid + sequencenumber + price + currency + mode + key)
4. Credentials: Verifies that portalid and aid` match your configured settings
> đ Reference: For more details, see Payone TransactionStatus Notification Documentation
---
For additional information and updates, please refer to the official Payone documentation:
Payone Documentation: https://docs.payone.com/payment-methods