NovaPay for WooCommerce — card payments via internet acquiring

NovaPay for WooCommerce is a payment plugin that accepts card payments through NovaPay internet acquiring (the payment service of Nova Poshta). The customer goes to a secure NovaPay page, pays by card, and the order in your store is confirmed on its own: NovaPay sends a postback, the plugin verifies its signature and amount and moves the order to “Processing”. No need to reconcile payments in the merchant dashboard by hand.

What the admin gets

• Sandbox on the NovaPay test environment — you test the integration before any real money moves.
• “Check keys” — the plugin opens a payment session and closes it right away. If the keys don’t match, you find out in the admin, not from a customer.
• Statuses that fit your process: which status a paid order moves to and what happens after a refund.
• Pro payment log: all NovaPay payments in one list — amount, session status in NovaPay and order status, masked card, RRN and one-click status reconciliation.

How it works, step by step

1. At checkout the customer picks “Card payment (NovaPay)” and places the order.
2. The plugin creates a payment session in NovaPay and passes the cart: products, shipping and fees, so the payment page shows exactly what is being paid for. Every request is signed with your private key.
3. The customer pays on the secure NovaPay page.
4. NovaPay sends a postback to your site. The plugin checks the RSA signature with the NovaPay public key and the amount — an unsigned or forged request is rejected.
5. The order moves to “Processing” (or the status you chose).
6. If the postback is late, the status is also pulled from NovaPay when the customer returns to the store. A paid order won’t be left “pending”.
7. With Pro in hold mode the funds are only blocked on the card and are captured when you move the order to “Completed” — handy when the goods need to be packed or stock checked first. NovaPay keeps the hold for up to 29 days.

Under the hood

• Signed requests both ways: the store signs requests with its private key, NovaPay signs postbacks with its own. Without a saved NovaPay public key incoming notifications are rejected — so nobody can “pay” an order with a forged request.
• The private key is stored encrypted in the database, not as plain text.
• Amount check: the amount from NovaPay is compared with the order total.
• Fallback status reconciliation when the customer returns — in case the postback was late or lost.
• A Pro gate that doesn’t brick anything: when the trial ends, only the Pro features stop and accepting payments doesn’t break; after a paid license term ends, Pro keeps working and only updates and support stop.

Installation

1. Plugins → Add New → Upload Plugin: choose novapay-for-woocommerce-1.0.1.zip and activate it.
2. Open WooCommerce → Settings → Payments → NovaPay.
3. For testing, enable “Sandbox” and enter the test merchant id and key from NovaPay.
4. For real payments, turn the sandbox off, enter the live merchant id, private key and NovaPay public key, save and click “Check keys”.
5. For Pro: paste the license key from the email you get after payment into the license field, or start the 7-day trial.