Recrio – Gambia Checkout for Wave

Description

Recrio – Gambia Checkout for Wave lets WooCommerce stores accept payments with Wave, the mobile money service used across The Gambia. It connects directly to your own Wave Business account through the Wave Checkout API: there is no intermediary, and payments go straight to your Wave Business wallet.

It is built for stores that sell in Gambian Dalasi (GMD), and for stores that sell in another currency (for example shops in Europe serving the Gambian community) together with a multi-currency plugin that lets customers pay in GMD.

How it works

1. At checkout the customer chooses Wave.
2. The customer is sent to Wave to confirm the payment: a QR code on a computer, the Wave app on a phone.
3. Wave notifies your store through a signed webhook and the order is marked as paid. When the customer comes back to your store, the payment is also checked directly with Wave.

Features

• Wave Checkout API with your own Wave Business account in The Gambia.
• Signed API requests (HMAC-SHA256), and signed webhooks with replay protection.
• The redirect back from Wave is never trusted as proof of payment: the checkout session is read again from Wave.
• Amount, currency, payment reference and session are matched to the order before it is marked as paid.
• Wave accepts whole Dalasi only: totals are rounded to the nearest Dalasi and the rounding is recorded on the order.
• Works with multi-currency plugins, both those that save orders in GMD and those that convert order totals when they are displayed.
• Classic checkout and Checkout block. Compatible with High-Performance Order Storage (HPOS).
• API key and secrets encrypted in the database, never sent to the browser.

Requirements

• A Wave Business account in The Gambia, with an API key that has access to the Checkout API and request signing enabled.
• A site served over HTTPS.
• Orders paid in GMD: either your store currency is GMD, or a multi-currency plugin lets customers pay in GMD at checkout. In any other currency Wave is shown as an invitation to switch to GMD.

This plugin is developed by Recrio Studio. It is not affiliated with, or endorsed by, Wave.

External services

This plugin connects to the Wave Checkout API (https://api.wave.com), provided by Wave. In The Gambia the service is operated by Wave Transfer Limited.

• When a customer places an order with Wave, the plugin creates a checkout session. It sends the amount in GMD, the currency code, a payment reference made of the site ID, the order ID and a random identifier, and the two addresses of your store to which Wave sends the customer back.
• When the customer comes back from Wave, or pays again an order that already has a session, the plugin reads that checkout session from Wave.
• When an administrator clicks “Test Wave connection”, the plugin sends a search request with a random reference.

Every request carries your API key and a signature of the request. No customer name, email address, phone number or postal address is sent by this plugin. Wave also sends payment notifications (webhooks) to your site’s REST API.

Wave terms: https://www.wave.com/en/terms_gm/
Wave privacy notice: https://www.wave.com/en/privacy/
Wave API documentation: https://docs.wave.com/

Privacy

The plugin stores:

• the API key and the two signing secrets, encrypted, in the WordPress options table;
• the gateway settings;
• on each order paid with Wave: the Wave session ID, the payment reference, the requested amount, the transaction ID, the IDs of processed webhook events, the last payment error and order notes.

Errors are written to the WooCommerce log (source: recrio-gambia-checkout-for-wave) without credentials. Debug logging is off by default.

Deleting the plugin removes the credentials and the settings only if “Delete data on uninstall” is enabled in the settings. Payment details saved on orders are always kept for your records.