WooCommerce integration.
Install Allwallex Crypto Checkout 0.1.0 on an explicit nonproduction sandbox store. Classic checkout, desktop/mobile Checkout Blocks and legacy/HPOS order storage are verified locally with WordPress 7.1.3, WooCommerce 11.2.1 and PHP 8.3.36. This release cannot fulfill live purchases.
01Prepare the store server
Enable PHP Sodium, back up the store, generate a separate random 32-byte encryption key encoded as 64 hexadecimal characters and keep it in protected server configuration. Set WP_ENVIRONMENT_TYPE to staging or development. Install the ZIP from this page through WordPress Plugins. The bundled readme includes setup, privacy and recovery instructions.
02Connect your merchant workspace
Save your merchant identity in Allwallex. Issue a testnet server key with orders:create and orders:read using passkey approval. Enter the exact workspace UUID and key in WooCommerce > Settings > Payments > Allwallex. Credentials are encrypted on the store server; later password fields remain blank and blank preserves the value.
03Verify your receiver before enabling checkout
Verify the HTTPS store website in Website Connection Center and create a webhook endpoint using the receiver URL shown in the plugin. Save its signing secret in the gateway settings, send an endpoint test with the current secret, then activate delivery. A passing current-workspace/current-secret test is required for checkout availability. A receiver test cannot pay an order.
04Choose an exact price asset
Select one test asset/network and the matching WooCommerce currency: USDC, ETH or TRX. Configure catalogue precision deliberately. This version does not convert fiat prices or silently treat USD as USDC. Confirm sandbox use and enable the gateway. Every shopper sees the Sandbox label and the hosted exact network and amount.
05Run background verification
Supervise WooCommerce Action Scheduler through server cron and monitor its allwallex group. A valid webhook is stored first; a worker then fetches the current authenticated order and binds its original ID, reference, workspace, asset and price. Only verified sandbox receipts can complete a sandbox store order. Redirects, forged positive event bodies and endpoint tests cannot do so.
06Recover the original request
Retry the same WooCommerce order after a lost response. The original durable reference survives a legitimate API-key rotation. Never delete records or change a pending order total to hide an unknown payment. The order panel provides a protected Check current Allwallex payment action, snapshot amounts and review messages. Interrupted completion requires manual stock/email/accounting reconciliation.
07Review refunds and exceptions
Prepare linked refunds in the original Allwallex order with fee review and passkey approval. Refund processing/delivery and price waivers block automatic fulfillment. The plugin creates no automatic WooCommerce cash refund or stock return; cancelled refunds still require explicit store fulfillment review. Cancelled or refunded store orders are never reopened automatically.
08Operate and rotate credentials
API rate limits and outages retain bounded retries; stale workers recover without repeating completion. Review exhausted or invalid events in Scheduled Actions and the original order. The previous signing secret is accepted for 24 hours after replacement; test the new current secret before checkout becomes available. Back up plugin records and the encryption key separately. Real service activation, public receivers and mainnet pilots remain required.
// wp-config.php; the environment value belongs in protected server configuration.
define('ALLWALLEX_ENCRYPTION_KEY', getenv('ALLWALLEX_ENCRYPTION_KEY'));
define('WP_ENVIRONMENT_TYPE', 'staging');
// Copy the exact receiver URL from the plugin settings.
POST https://YOUR_VERIFIED_STORE/wp-json/allwallex/v1/webhook
// Plain permalink stores use the displayed ?rest_route= URL instead.
// No API secret belongs in checkout JavaScript or HTML.Open your workspace