Payroc for WooCommerce — card payments on the Payroc payment page

Payroc Payments for WooCommerce takes card payments through the Payroc Hosted Payment Page. The buyer picks Payroc at the checkout, types the card on the Payroc page and comes back to the shop; the order is paid only when the signature of the answer matches and the amount equals the order total. USD and CAD terminals, classic and block checkout and HPOS are supported.

What the free version does

The settings live in one place: WooCommerce → Payroc. Set the mode (test or live), the terminal ID, the terminal secret and the terminal currency; the secret and the API key are stored encrypted. The module shows the two addresses for the Payroc Self-Care Portal: the Receipt Page URL, where Payroc brings the buyer back, and the Validation URL, where Payroc posts a confirmation in the background even if the buyer closed the page. “Check connection” asks Payroc whether it knows the terminal and whether it is active. At the checkout the request is signed (SHA-512) and goes to the Payroc payment page; every attempt gets a new order number at Payroc and the cart stays until the order is paid. Payroc’s answer is checked: the signature, the amount and the reference to the order. An approved payment turns the order to paid, a declined one to failed with the reason and the buyer goes back to the pay page; repeated and late answers change nothing, and an amount mismatch puts the order on hold. Refunds, full and partial, are made right from the WooCommerce order. “Check payment status” in the order asks Payroc about the payment.

What Pro adds

Payment links for any unpaid order, for example one taken by phone: single-use, with a preset amount and a number of days; Payroc e-mails it to the buyer, and a paid or cancelled order switches the link off by itself. Authorize-only mode: the amount is held on the card, the order sits on hold, and the capture happens on Completed or Processing or with a button; cancelling the order releases the hold. Bulk actions on the orders list (refund in full, capture held payments, check status, up to 50 at a time). An hourly background check of orders Payroc has not answered for (the last 3 days). The Payments report tab: the terminal’s payments for a period, split into settled and unsettled and matched to orders (matches, amount differs, approved but unpaid, no shop order), with a CSV export. Up to three extra terminals for other currencies, each with its own secret.

Good to know before you start

• The Receipt Page URL and the Validation URL are set in the Payroc Self-Care Portal for each terminal separately. If they are left out, buyers are not brought back and the order stays pending (the “Check payment status” button in Free and the hourly check in Pro pick it up).
• One terminal has one return address: a terminal that already serves another site or integration will send its answers there.
• The buyer types the card on the Payroc page, so card data never reaches your shop. Saved cards and WooCommerce payment tokens are not part of this version.
• Refunds and the status check need an API key from the Payroc Developer Portal (taking payments works without it).
• Payroc does not run pre-authorizations for merchants with surcharging, dual pricing or convenience fees. If an automatic capture fails, the order carries a note and has already changed its status.

How it works, step by step

1. In the Payroc Self-Care Portal get the terminal ID and the terminal secret, and create an API key in the Developer Portal.
2. In WooCommerce → Payroc enter them, choose the terminal currency and press “Check connection”.
3. Copy the Receipt Page URL and the Validation URL from the settings into the Payroc Self-Care Portal (terminal → Settings) and enable Validation.
4. Switch Payroc on in WooCommerce → Settings → Payments and place a test order in test mode.

Under the hood

• The request to the payment page is signed with SHA-512; the answer is checked by signature, amount and the order reference the shop issued.
• A lock against the race: the answer on the return page and the background confirmation are each handled once.
• Refunds carry an idempotency key; Payroc errors (RFC 7807) are shown in words.
• The terminal secret and the API key are stored encrypted; HPOS and block checkout compatible; language: English.

How to install

1. Plugins → Add New → Upload Plugin: choose the zip and activate it.
2. WooCommerce → Payroc: the terminal, the secret, the API key, “Check connection”.
3. Add both addresses in the Payroc Self-Care Portal.
4. Switch the Payroc payment method on.

The module is not on wordpress.org yet: the free version and Pro are one archive from this page. Without a key it works as the free version.