Pay4All for TWINT

Description

Pay4All for TWINT adds TWINT as a payment method to the free Pay4All Shop plugin (order-form-based checkouts).

TWINT is a trademark of TWINT AG (Switzerland). This plugin is an independent integration and is not affiliated with, endorsed by, or sponsored by TWINT AG.

Main features:

• TWINT integration for the free Pay4All Shop plugin (order forms with TWINT payment).
• Step-by-step setup wizard: TWINT credentials, certificate upload, connection test, status page.
• Automatic conversion of the .p12 certificate delivered by TWINT to PEM format.
• Cash register enrollment and connection test built into the wizard.
• Localized payment instructions in French, German, Italian and English.

To use this plugin you need:

• the free Pay4All Shop plugin installed and active.
• a TWINT merchant account with a configured store and an active certificate (see https://portal.twint.ch).

There is no license fee, no subscription, no domain activation. Install, activate, run the wizard, done.

WooCommerce support

The WooCommerce payment-gateway integration (classic checkout, Checkout Blocks, HPOS, refunds, background monitoring) is not shipped inside this free plugin. It lives inside the paid companion « Pay4All Pro », distributed outside WordPress.org from https://pay4all.ch/. Install Pay4All Pro next to this plugin to enable the WooCommerce TWINT gateway.

External services

This plugin connects to the TWINT merchant SOAP API (operated by TWINT AG) to authorize, capture, refund and reconcile payments. Without a valid TWINT merchant account and certificate, the gateway cannot process payments.

What it is used for

• Every TWINT payment initiated from a Pay4All Shop form is forwarded to the TWINT SOAP API for authorization and status polling (payment start, background status polling, refund, cancellation).
• Nothing else is sent to any external service.

What data is sent, and when

• On payment start: the order number, the amount, the currency, the store UID (from your TWINT merchant account), the cash-register ID and — depending on your TWINT setup — the customer’s e-mail or phone number.
• On status polling and reconciliation: only the TWINT transaction identifier returned by the previous call.
• On refund: the TWINT transaction identifier plus the amount to refund.
• No login credentials, no plugin telemetry, no site metadata are sent.

Where the data is sent

The plugin talks to one of three TWINT-owned endpoints depending on your T4A_ENVIRONMENT setting:

• Production: https://service.twint.ch/merchant/service/TWINTMerchantServiceV8_4
• Integration / staging: https://service-int.twint.ch/merchant/service/TWINTMerchantServiceV8_4
• Pre-authorization test: https://service-pat.twint.ch/merchant/service/TWINTMerchantServiceV8_4

Terms of use and privacy policy for TWINT

• TWINT terms of use: https://www.twint.ch/en/legal/
• TWINT data protection: https://www.twint.ch/en/data-protection/

No other external service is contacted by this plugin.

Source code

The complete, non-minified source of this plugin is bundled inside the ZIP itself. Every PHP file is human-readable and directly editable. The JavaScript bundles under assets/js/ are shipped in a pretty-printed, non-minified form so you can read and modify them without a build step.

No compiler, transpiler or bundler is required to work on this plugin.