Blackstone Online Gateway

Blackstone Online Gateway is a custom payment integration for WooCommerce that allows merchants to process payments through the Blackstone Merchant platform.
It provides a seamless Payments experience, secure communication with the API, and supports refund handling directly via WooCommerce.

Main Features

• Full integration with WooCommerce.
• Secure API connection to Blackstone Merchant.
• Supports payment authorization, capture and refund.
• Refund processing via API with stock management.
• Admin settings page for easy configuration.
• Compatible with the latest versions of WooCommerce and WordPress.

This plugin requires an active merchant account with Blackstone Merchant.

External Services

This plugin relies on the following third-party services to process payments and ensure transaction security:

BMS Pay (Blackstone Merchant Services)

• Service Purpose: Used to process credit card transactions (authorization and capture) and handle refunds securely via their REST API. This service is required for the plugin to function.
• Domain(s): https://services.bmspay.com/
• Endpoints Used:
  • BusinessSettings: Retrieves merchant-specific configuration (surcharges, 3DS status, and display labels).
  • Transactions/Sale: Processes new payments when card data is entered manually.
  • Transactions/SaleWithToken: Processes payments using secure tokens for customers with saved cards.
  • Transactions/DoRefund: Handles full or partial refunds directly from the WooCommerce admin.
  • Auth/TokenThreeDS: Generates secure authentication tokens specifically for 3D Secure verification.
• Data Sent: Transaction details (amount, currency, order reference), billing information (name, address, email, phone), and credit card data. Data is sent only when a payment is processed or a refund is initiated by the administrator.
• Provider: Blackstone Merchant Services
• Terms of Service: https://www.blackstoneonline.com/es/legal/terms-of-service
• Privacy Policy: https://www.blackstoneonline.com/es/legal/privacy-policy
• API Documentation: https://documentation.bmspay.com/index.html

3D Integrator (3DSI)

• Service Purpose: Provides 3-D Secure 2.0 authentication to verify cardholder identity, perform risk analysis, and prevent payment fraud. This service is required for the plugin to function.
• Domain(s): https://api.3dsintegrator.com/, https://api-sandbox.3dsintegrator.com/, https://cdn.3dsintegrator.com/
• Scripts/Endpoints Used:
  • ThreeDS.js: Core logic for 3DS 2.0 authentication.
  • threeds.2.2.20231219.min.js: Performs silent “Device Fingerprinting” for risk assessment.
• Data Sent: Card identifiers (not full card number), merchant ID, transaction metadata (amount, currency), and device fingerprinting data. This data is sent specifically during the checkout process when 3DS authentication is required.
• Provider: 3D Integrator (via Blackstone)
• Legal Links:
  • Terms of Service
  • Privacy Policy
• Documentation:
  • 3DS Integrator Docs
  • What is 3DS?

Bundled Libraries

This plugin includes the following third-party libraries:

• SweetAlert2: A beautiful, responsive, and customizable replacement for JavaScript’s popup boxes. It is used to provide enhanced user notifications and modal alerts during the checkout and payment process.
  • License: MIT License
• Inputmask: A jQuery plugin used to create input masks. It ensures that sensitive data, such as credit card numbers and expiration dates, are entered in the correct format by the user.
  • License: MIT License

License

This plugin is licensed under the GPLv2 or later license.
You are free to modify and redistribute it under the same license.
See https://www.gnu.org/licenses/gpl-2.0.html for details.

Credits

Developed and maintained by the plugin author.
Website: https://www.blackstonemerchant.com/
Blackstone Merchant platform: https://www.blackstonemerchant.com/