WooCommerce Docs

OasisPay Checkout for WooCommerce

Install the official plugin, connect your OasisPay keys, and use signed webhooks to update WooCommerce orders automatically.

WordPress plugin

Hosted Checkout

The plugin creates an OasisPay Hosted Checkout session for each WooCommerce order.

API Keys

Use test keys for sandbox orders and live keys only after your OasisPay business is approved.

Webhooks

Payment status is confirmed by OasisPay webhooks. Email receipts must not be used to credit orders.

Before you start

WooCommerce must be installed and active.
Store currency should be set to NGN.
Your OasisPay merchant account must have API keys.
Your webhook URL must be reachable from OasisPay servers.

Install

Install from WordPress.org

Use the official WordPress Plugin Directory release. Avoid installing plugin copies from unknown sources.

1Open WordPress Admin.
2Go to Plugins, then Add New Plugin.
3Search for OasisPay Checkout.
4Install and activate OasisPay Checkout for WooCommerce.
5Open WooCommerce, Settings, Payments, then OasisPay Checkout.

Plugin settings

Enable/Disable

Enable OasisPay Hosted Checkout.

Environment

Use Test while validating setup. Use Live only after KYC approval.

API Base URL

https://api.oasispayhq.com/api/v1

Secret Key

Paste the matching test or live secret key from OasisPay.

Webhook Secret

Paste the endpoint secret created in your OasisPay dashboard.

Webhook URL

Copy this value from the plugin and create a webhook endpoint in OasisPay.

Open API keys

Webhook setup

In OasisPay, create a merchant webhook endpoint with your WooCommerce webhook URL and enable these events:

payment.success
payment.failed

Your WooCommerce webhook URL usually looks like this:

https://your-store.com/?wc-api=oasispay_checkout_webhook

Go-live checklist

Your OasisPay business KYC is approved.
Live mode is enabled for the active business.
Live secret key is saved in the plugin settings.
The webhook endpoint is active in OasisPay.
A test order has completed successfully before accepting real customers.

Fixing Cloudflare 403 webhook delivery errors

If your store uses Cloudflare, its firewall can block OasisPay server-to-server webhook requests. The payment can be successful while your WooCommerce order remains pending because your webhook returned 403.

OasisPay webhook source IPs:

167.233.33.130
2a01:4f8:1c18:4c3b::1

Recommended scoped Cloudflare expression:

(ip.src eq 167.233.33.130 or ip.src eq 2a01:4f8:1c18:4c3b::1)
and http.host eq "yourdomain.com"
and http.request.uri.path eq "/your-oasispay-webhook-path"
and http.request.method eq "POST"

Action: Skip WAF, custom rules, rate limiting, bot fight, browser integrity checks, and security level for this webhook path only.

Best permanent option: create a DNS-only webhook subdomain such as webhook.yourdomain.com, point it directly to your server, and use a URL like https://webhook.yourdomain.com/oasispay-webhook.