FAIR

Federated and Independent Repositories

Blackstone Online Gateway

Plugin Banner

Blackstone Online Gateway

by carlosraul7

Download
Description

Blackstone Online Gateway is a custom payment integration for WooCommerce that allows merchants to process payments through the Blackstone Merchant platform.
It provides a seamless Payments experience, secure communication with the API, and supports refund handling directly via WooCommerce.

Main Features

  • Full integration with WooCommerce.
  • Secure API connection to Blackstone Merchant.
  • Supports payment authorization, capture and refund.
  • Refund processing via API with stock management.
  • Admin settings page for easy configuration.
  • Compatible with the latest versions of WooCommerce and WordPress.

This plugin requires an active merchant account with Blackstone Merchant.

External Services

This plugin relies on the following third-party services to process payments and ensure transaction security:

BMS Pay (Blackstone Merchant Services)

  • Service Purpose: Used to process credit card transactions (authorization and capture) and handle refunds securely via their REST API. This service is required for the plugin to function.
  • Domain(s): https://services.bmspay.com/
  • Endpoints Used:
    • BusinessSettings: Retrieves merchant-specific configuration (surcharges, 3DS status, and display labels).
    • Transactions/Sale: Processes new payments when card data is entered manually.
    • Transactions/SaleWithToken: Processes payments using secure tokens for customers with saved cards.
    • Transactions/DoRefund: Handles full or partial refunds directly from the WooCommerce admin.
    • Auth/TokenThreeDS: Generates secure authentication tokens specifically for 3D Secure verification.
  • Data Sent: Transaction details (amount, currency, order reference), billing information (name, address, email, phone), and credit card data. Data is sent only when a payment is processed or a refund is initiated by the administrator.
  • Provider: Blackstone Merchant Services
  • Terms of Service: https://www.blackstoneonline.com/es/legal/terms-of-service
  • Privacy Policy: https://www.blackstoneonline.com/es/legal/privacy-policy
  • API Documentation: https://documentation.bmspay.com/index.html

3D Integrator (3DSI)

  • Service Purpose: Provides 3-D Secure 2.0 authentication to verify cardholder identity, perform risk analysis, and prevent payment fraud. This service is required for the plugin to function.
  • Domain(s): https://api.3dsintegrator.com/, https://api-sandbox.3dsintegrator.com/, https://cdn.3dsintegrator.com/
  • Scripts/Endpoints Used:
    • ThreeDS.js: Core logic for 3DS 2.0 authentication.
    • threeds.2.2.20231219.min.js: Performs silent “Device Fingerprinting” for risk assessment.
  • Data Sent: Card identifiers (not full card number), merchant ID, transaction metadata (amount, currency), and device fingerprinting data. This data is sent specifically during the checkout process when 3DS authentication is required.
  • Provider: 3D Integrator (via Blackstone)
  • Legal Links:
  • Documentation:

Bundled Libraries

This plugin includes the following third-party libraries:

  • SweetAlert2: A beautiful, responsive, and customizable replacement for JavaScript’s popup boxes. It is used to provide enhanced user notifications and modal alerts during the checkout and payment process.
  • Inputmask: A jQuery plugin used to create input masks. It ensures that sensitive data, such as credit card numbers and expiration dates, are entered in the correct format by the user.

License

This plugin is licensed under the GPLv2 or later license.
You are free to modify and redistribute it under the same license.
See https://www.gnu.org/licenses/gpl-2.0.html for details.

Credits

Developed and maintained by the plugin author.
Website: https://www.blackstonemerchant.com/
Blackstone Merchant platform: https://www.blackstonemerchant.com/

  1. Upload the blackstone-online-gateway folder to the /wp-content/plugins/ directory, or install it directly through the WordPress plugins screen.
  2. Activate the plugin through the ‘Plugins’ menu in WordPress.
  3. Navigate to WooCommerce > Settings > Payments > Blackstone Merchant.
  4. Enable the gateway and enter your merchant credentials (API Key, Merchant ID, and Token).
  5. Save changes and perform a test transaction to ensure everything is configured correctly.
Do I need a Blackstone Merchant account?

Yes. You must have an approved merchant account from Blackstone Merchant to process transactions.

Does this plugin support refunds?

Yes. Refunds can be processed directly from the WooCommerce order screen. The plugin sends refund requests securely to the Blackstone API.

Is it compatible with WooCommerce Subscriptions or Bookings?

Currently, it supports standard one-time payments. Future versions may include support for recurring billing.

Does it store credit card information?

No. The plugin does not store or log any sensitive card data. All transactions are handled securely through the Blackstone Merchant gateway.

4.5.57

  • Security: Strengthened nonce validation and implemented strict role-based capability checks (edit_shop_orders) for administrative actions to prevent unauthorized access, resolving critical WordPress review feedback.
  • Compliance: Expanded external service disclosures for BMS Pay and 3D Integrator, clearly stating their necessity for plugin functionality.
  • Compliance: Added MIT License disclosures and official repository links for bundled libraries (SweetAlert2, Inputmask).
  • Documentation: Added direct documentation links for 3D Secure Integrator and updated service provider details.

4.5.0

  • Initial internal release and beta testing.
  • Core integration with Blackstone Merchant API.
  • Support for Payment Authorization, Capture, and Refunds.
Back to top