SouthPay

<p>SouthPay Crypto Payment Gateway lets your WooCommerce store accept cryptocurrency payments through SouthPay’s secure hosted checkout. Connect in one click via OAuth, and the plugin handles webhook setup, token refresh, and on-chain confirmation automatically — no key copy-pasting and no manual webhook configuration.</p>
<p>Customers are redirected to a secure SouthPay-hosted checkout where they can pay using supported cryptocurrencies. The order status updates automatically via webhook once payment is confirmed on-chain.</p>
<h3>Features</h3>
<ul>
<li>One-click “Connect with SouthPay” — OAuth 2.0 with PKCE, no key copy-pasting</li>
<li>Automatic background token refresh — the connection stays live without merchant action</li>
<li>Accept cryptocurrency payments via a hosted checkout</li>
<li>Automatic order status updates via secure webhooks</li>
<li>Automatic webhook endpoint registration after first connection</li>
<li>HMAC-SHA256 webhook signature verification</li>
<li>Configurable invoice prefix</li>
<li>Minimum order amount filter</li>
<li>Debug logging via WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Status <span aria-hidden="true" class="wp-exclude-emoji">→</span> Logs</li>
<li>Customisable checkout title and description</li>
<li>Block checkout (Gutenberg) support</li>
</ul>
<h3>Requirements</h3>
<ul>
<li>WordPress 5.8 or higher</li>
<li>WooCommerce 6.0 or higher</li>
<li>PHP 7.4 or higher (cURL and OpenSSL extensions enabled)</li>
<li>HTTPS on your store domain — required for OAuth redirect and webhook delivery</li>
<li>A publicly reachable site URL so SouthPay can POST webhook events</li>
<li>A SouthPay merchant account at https://southpay.io/</li>
</ul>
<h3>Configuration</h3>
<p>All settings live at <strong>WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Settings <span aria-hidden="true" class="wp-exclude-emoji">→</span> Payments <span aria-hidden="true" class="wp-exclude-emoji">→</span> SouthPay</strong>.</p>
<p><strong>Your SouthPay Account</strong></p>
<ul>
<li><strong>Status</strong> — shows the current connection state (Connected, Disconnected, or Reconnect Required) and the connected store name.</li>
<li><strong>Connect / Disconnect</strong> — manages the OAuth connection. Disconnecting revokes the refresh-token family on SouthPay’s side, not just the local copy.</li>
<li><strong>API Key</strong> — only used as a manual fallback when OAuth isn’t possible (see <em>Authentication</em> below). Leave blank in the normal OAuth flow.</li>
</ul>
<p><strong>Checkout Appearance</strong></p>
<ul>
<li><strong>Payment Method Name</strong> — what customers see at checkout (default: <em>SouthPay</em>). Customise this to something like “Pay with Crypto”.</li>
<li><strong>Payment Method Description</strong> — short text shown below the name at checkout.</li>
</ul>
<p><strong>Advanced</strong></p>
<ul>
<li><strong>Minimum Order Amount</strong> — hides SouthPay at checkout when the cart total is below this value. Set to <code>0</code> to always show it. Default: <code>1</code>.</li>
<li><strong>Order Reference Prefix</strong> — prepended to the order number sent to SouthPay (default: <code>WC-</code>), so orders are easy to identify in the SouthPay dashboard.</li>
<li><strong>Debug Logging</strong> — writes detailed request/response logs to <strong>WooCommerce <span aria-hidden="true" class="wp-exclude-emoji">→</span> Status <span aria-hidden="true" class="wp-exclude-emoji">→</span> Logs</strong> under the <code>southpay</code> source. Enable only when troubleshooting; the logs can contain order metadata.</li>
</ul>
<h3>Authentication</h3>
<p>The plugin uses <strong>OAuth 2.0 with PKCE</strong> and the <code>offline_access</code> scope, so the connection survives access-token expiry without merchant intervention:</p>
<ul>
<li>Access tokens are short-lived (one hour) and refreshed automatically before each API call.</li>
<li>Refresh tokens rotate on every use, and the previous refresh token is invalidated server-side.</li>
<li>If the refresh-token family is ever revoked (for example, an admin clicks <em>Disconnect</em> in the SouthPay dashboard), the plugin surfaces a <strong>Reconnect your account</strong> admin notice in WooCommerce and the gateway is hidden at checkout until reconnected.</li>
<li>Disconnecting from the WooCommerce side calls SouthPay’s revoke endpoint to invalidate the entire token family — not just the locally cached access token.</li>
</ul>
<p><strong>Manual API Key fallback.</strong> For environments without browser access (air-gapped boxes, whitelabel deployments, automated provisioning), paste a long-lived API key from <strong>SouthPay Dashboard <span aria-hidden="true" class="wp-exclude-emoji">→</span> Developers <span aria-hidden="true" class="wp-exclude-emoji">→</span> API Keys</strong> into the <strong>API Key</strong> field. This mode bypasses OAuth and does not auto-refresh; you are responsible for rotating the key yourself. The webhook still needs to be created manually in this mode.</p>
<h3>Webhook Setup</h3>
<p>In the standard OAuth flow there is nothing to configure — the plugin registers a webhook endpoint pointing at your site automatically the first time you connect, and stores the signing secret locally.</p>
<ul>
<li>The active endpoint URL is shown in the <strong>Webhook URL</strong> row on the settings page (it is the WooCommerce REST route <code>/wc-api/southpay_webhook</code>).</li>
<li>Every inbound delivery is signed with <strong>HMAC-SHA256</strong> over the raw request body plus a timestamp. The plugin rejects requests with a missing, malformed, or stale signature before any order state is touched.</li>
<li>If you ever need to rotate the signing secret (for example, after a security incident or when migrating environments), click <strong>Reconnect webhook</strong> on the settings page. The plugin will deregister the old endpoint and create a new one with a fresh secret in one step.</li>
</ul>
<h3>How It Works</h3>
<ol>
<li>The customer selects SouthPay at checkout and clicks <strong>Place order</strong>.</li>
<li>WooCommerce creates the order with status <strong>Pending payment</strong>.</li>
<li>The plugin calls <code>POST https://api.southpay.io/api/v2/payments</code> with the order total, currency, order reference, and return URLs to create a hosted-checkout session.</li>
<li>The customer is redirected to SouthPay’s hosted checkout, where they choose a cryptocurrency, see the quoted amount and exchange rate, and send the funds from their wallet.</li>
<li>Once the transaction is confirmed on-chain, SouthPay POSTs a signed webhook to your store.</li>
<li>The plugin verifies the HMAC-SHA256 signature, matches the event to the WooCommerce order, and transitions the order:
<ul>
<li><strong>paid</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Processing</em> (or <em>Completed</em> for virtual orders), and a payment note is added.</li>
<li><strong>expired</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Cancelled</em>.</li>
<li><strong>failed</strong> <span aria-hidden="true" class="wp-exclude-emoji">→</span> order moves to <em>Failed</em>; the customer can retry from the order-pay page.</li>
</ul>
</li>
<li>The customer is redirected back to your store’s order-received page.</li>
</ol>
<p>All state transitions are driven by webhooks — the customer’s browser returning is not required to mark the order as paid.</p>
<h3>External Services</h3>
<p>This plugin connects to the SouthPay API to create cryptocurrency payment sessions and receive order status updates via webhook. Connection to this service is required for the gateway to function.</p>
<p>When a customer places an order using SouthPay as the payment method, the plugin sends the order total, currency, and return URLs to https://api.southpay.io/api/v2/payments to generate a hosted checkout session. No data is sent at any other time during normal store operation.</p>
<p>This service is provided by SouthPay: https://southpay.io/<br />
Terms of service: https://southpay.io/terms<br />
Privacy policy: https://southpay.io/privacy</p>


SouthPay Crypto Payment Gateway

Accept cryptocurrency payments in WooCommerce via SouthPay's hosted checkout, with one-click OAuth connect and automatic webhook registration.

falselight

<p>Add a live cryptocurrency price widget to any WordPress site in minutes with the Gutenberg block or the classic shortcode.</p>
<p>Cryptocurrency Price Widget is designed for publishers, crypto blogs, fintech products, landing pages, and market-focused websites that want real-time price visibility without API keys, paid feed setup, or market calculations running on WordPress itself. Add the block, choose your coins and currencies, adjust the look, and publish. Shortcodes remain fully supported for existing pages, widgets, and classic-editor workflows.</p>
<h4>Live demo and video</h4>
<ul>
<li>Demo and generator: <a href="https://co-in.io/crypto-price-widget/" rel="nofollow ugc">CO-IN.IO</a></li>
</ul>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/D7thN9c8PxM?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h4>Why site owners use Cryptocurrency Price Widget</h4>
<ul>
<li>Gutenberg block for modern WordPress editing, plus the original shortcode for backward compatibility.</li>
<li>No API key required: install, add the block, choose assets, and publish.</li>
<li>Live streaming prices in a compact, attention-grabbing widget.</li>
<li>Fast setup with a built-in preview, block controls, and shortcode generator.</li>
<li>Flexible design controls for color, rounded corners, shadow, border, striped rows, streaming, and source attribution.</li>
<li>Lightweight WordPress integration: your site only outputs the widget embed code and settings, while rendering and live market delivery happen in the visitor’s browser.</li>
<li>14,280 supported unique-symbol cryptocurrency choices and 160 bundled fiat currencies in the admin selector and block controls.</li>
<li>Updated local fiat flags, CO-IN.IO crypto asset JSON v3, CoinLore-backed metadata, and a more resilient setup experience for WordPress 6.x and 7.0.</li>
<li>Multilingual-ready output with localized widget script loading.</li>
</ul>
<h4>Perfect for</h4>
<ul>
<li>Crypto blogs and market news sites</li>
<li>Web3, wallet, exchange, and fintech landing pages</li>
<li>Price overview pages and comparison pages</li>
<li>Affiliate and education content around Bitcoin, Ethereum, and altcoins</li>
<li>Publishers who want a live widget without building their own price feed integration</li>
</ul>
<h4>Quick start</h4>
<ol>
<li>Install and activate the plugin.</li>
<li>Open a post or page in the block editor.</li>
<li>Add the Cryptocurrency Price Widget block.</li>
<li>Choose the currencies for the top row and the assets for the price list.</li>
<li>Adjust the widget design, preview the result, and publish.</li>
</ol>
<p>Shortcode users can still open Settings > CR Crypto Price, generate a shortcode, and paste it into any post, page, or shortcode-friendly area.</p>
<h4>Gutenberg block and shortcode</h4>
<p>Use the Cryptocurrency Price Widget block in the WordPress editor for the fastest setup. The shortcode remains available for classic editor content, widgets, templates, and existing installations.</p>
<h4>Shortcode example</h4>
<p>[cryptocurrency-price-widget base=”USD,EUR,CNY,GBP” items=”BTC,ETH,LTC,XMR,DASH” backgroundColor=”fff” streaming=”1″ rounded=”1″ boxShadow=”1″ border=”1″ signature=”1″]</p>
<h4>Block controls and shortcode attributes</h4>
<p>The Gutenberg block exposes these settings in the block sidebar. Shortcode users can use the same values as attributes:</p>
<ul>
<li>items – comma-separated asset symbols shown in the main list</li>
<li>base – comma-separated currencies shown in the top row</li>
<li>backgroundColor – background color in hex format without the # symbol</li>
<li>streaming – 1 to enable live updates, 0 to disable them</li>
<li>striped – 1 to enable striped rows, 0 to disable them</li>
<li>rounded – 1 to enable rounded corners, 0 to disable them</li>
<li>boxShadow – 1 to enable a shadow, 0 to disable it</li>
<li>border – 1 to show a border, 0 to hide it</li>
<li>signature – 1 to show the Source: CurrencyRate.Today attribution, 0 to hide it</li>
</ul>
<h4>External services</h4>
<p>This plugin uses external services to deliver live prices, front-end rendering, Gutenberg/admin previews, and some admin assets.</p>
<ul>
<li>CO-IN.IO loads the front-end widget script and the admin preview.<br />
Service URL: <a href="https://co-in.io/crypto-price-widget/" rel="nofollow ugc">https://co-in.io/crypto-price-widget/</a></li>
<li>CO-IN.IO publishes the public cryptocurrency asset metadata used by the admin selector and Gutenberg block controls.<br />
Metadata URL: <a href="https://co-in.io/data/crypto-assets.json" rel="nofollow ugc">https://co-in.io/data/crypto-assets.json</a></li>
<li>The CO-IN.IO widget runtime may request CoinLore for crypto prices and MoneyConvert CDN for fiat cross-rates in the visitor browser. In the Gutenberg editor preview only, authorized WordPress users may load those same price-provider responses through a WordPress admin-ajax preview proxy so the editor can show the live widget without browser CORS errors.<br />
Service URLs: <a href="https://api.coinlore.net/api/ticker/" rel="nofollow ugc">https://api.coinlore.net/api/ticker/?id=…</a> and <a href="https://cdn.moneyconvert.net/api/latest.json" rel="nofollow ugc">https://cdn.moneyconvert.net/api/latest.json</a></li>
<li>CurrencyRate.Today is used for the optional Source attribution link.<br />
Service URL: <a href="https://currencyrate.today/" rel="nofollow ugc">https://currencyrate.today/</a><br />
Privacy Policy: <a href="https://currencyrate.today/page/privacy" rel="nofollow ugc">https://currencyrate.today/page/privacy</a><br />
Legal Disclaimer: <a href="https://currencyrate.today/page/disclaimer" rel="nofollow ugc">https://currencyrate.today/page/disclaimer</a></li>
<li>CryptoCompare is used in the admin area for cryptocurrency icon assets only. It is not used as the supported-asset list.<br />
Service URL: <a href="https://www.cryptocompare.com/" rel="nofollow ugc">https://www.cryptocompare.com/</a><br />
Privacy Policy: <a href="https://www.cryptocompare.com/privacy-policy/" rel="nofollow ugc">https://www.cryptocompare.com/privacy-policy/</a><br />
Terms & Conditions: <a href="https://www.cryptocompare.com/terms-conditions/" rel="nofollow ugc">https://www.cryptocompare.com/terms-conditions/</a></li>
</ul>
<p>When the widget or admin preview is loaded, requests may include selected asset symbols, selected display options, language context, and the browser request needed to return the remote widget script, preview, icon assets, or browser-side market data.</p>
<p>Supported by: <a href="https://currencyrate.today" rel="nofollow ugc">CurrencyRate.today</a></p>


Cryptocurrency Price Widget

Add live cryptocurrency prices with a Gutenberg block or shortcode. No API key, free setup, and fast browser-side widget rendering.

SouthPay Crypto Payment Gateway vs Cryptocurrency Price Widget