Paystack Payment Extension

Accept payments via Paystack on your TastyIgniter site. Paystack is a payment gateway supported in Nigeria, Ghana, Kenya, South Africa, and other African countries, with support for multiple currencies and payment methods.

Features

• Multiple payment methods — card, bank transfer, USSD, mobile money, QR
• Saved cards — customers can save authorization codes for faster future payments
• Refunds — full or partial refunds initiated from the admin order view
• Two integration modes — Pop-up (Paystack inline) or Redirect (hosted checkout)
• Webhook handling — automatic payment verification with HMAC SHA512 signature validation
• Multi-currency — supports any currency Paystack supports for your account

Quick Start

Installation

composer require tipowerup/ti-ext-paystack
php artisan igniter:up

Requirements

• TastyIgniter v4.0+
• PHP 8.2+
• The Pay Register extension installed and activated

Setup

1. Go to Manage > Settings > Payment Gateways in the admin panel
2. Edit the Paystack payment method
3. Select Transaction Mode (Test or Live) and enter your matching Paystack secret key
4. Choose Integration Type (Pop-up or Redirect)
5. Toggle Status to ON and click Save

Configuration

Settings Overview

Paystack API Keys

Get your API keys from your Paystack Dashboard under Settings > API Keys & Webhooks. Always test against the test keys before going live — Paystack provides test card numbers for end-to-end testing.

Integration Modes

Pop-up Mode (default)

Customers stay on your checkout page; Paystack's inline JavaScript opens a modal for card entry. Best UX for most stores.

Redirect Mode

Customers are redirected to a Paystack-hosted payment page, then returned to your site after payment. Useful when popup blockers or third-party script restrictions are a concern.

Switch between modes any time from the payment method edit screen.

Webhook

Paystack sends webhook events to confirm successful charges out-of-band. This is the recommended way to ensure orders are marked paid even if the customer closes the browser before being redirected back.

Webhook URL

Your webhook URL is:

https://your-site.com/ti-paystack/handle/paystack_webhook

The exact URL is shown on the Paystack payment method edit page.

Configure in Paystack

1. Log into your Paystack Dashboard
2. Go to Settings > API Keys & Webhooks
3. Paste the webhook URL into the Webhook URL field for the matching environment (test or live)
4. Save

Security

Incoming webhook payloads are validated using HMAC SHA512 against your secret key (the x-paystack-signature header). Requests with invalid signatures are rejected. No IP whitelisting is required.

Saved Cards (Payment Profiles)

When a customer pays successfully, Paystack returns an authorization_code that can be reused for future charges without re-entering card details.

• Saved cards appear at checkout under "Pay with saved card"
• Customers can manage saved cards from their account profile
• Removal deletes the local record only — Paystack authorizations remain valid until the underlying card expires

Refunds

Refunds (full or partial) can be initiated from the Order view in the admin panel:

1. Open the order
2. Open Payment Logs
3. Click Refund on a successful payment log entry
4. Enter the refund amount (full or partial) and a reason
5. Submit

The refund is processed via Paystack's refund API and recorded as a new payment log entry on the order.

Currency & Amounts

Paystack expects amounts in the smallest currency unit (kobo for NGN, pesewas for GHS, cents for USD/ZAR). The extension automatically multiplies the order total by 100 before sending it to Paystack — no manual conversion needed.

The transaction currency is taken from your TastyIgniter location currency. Make sure it matches a currency your Paystack account is configured for, otherwise transactions will be rejected.

Troubleshooting

"Invalid key" or authentication errors

Symptom: Paystack returns an authentication error when initialising a transaction.

Solution:

• Verify the secret key matches the selected Transaction Mode (test key with test mode, live key with live mode)
• Check the key was copied without leading/trailing whitespace
• Confirm the key has not been rotated in the Paystack dashboard

Webhook not marking orders as paid

Symptom: Customer paid successfully but the order status is not updated.

Solution:

1. Confirm the webhook URL is configured in the Paystack dashboard for the correct environment
2. Check the webhook delivery log in the Paystack dashboard — Paystack shows the response code from each delivery
3. Inspect Laravel logs for signature validation failures (wrong secret key for the environment is the most common cause)

Customer redirected back but order not paid

Symptom: Customer is returned to the site but the order remains unpaid.

Solution:

• Wait for the webhook to fire (usually within seconds) — webhooks are the source of truth
• Check the Payment Logs on the order; failed verification calls are recorded there
• Ensure the configured currency on the payment method matches the order currency

Pop-up blocked by browser

Symptom: Pop-up integration shows nothing on click.

Solution:

• Some browsers block popups triggered outside a direct user click. Switch to Redirect mode if your customers commonly hit this.

Technical Details

Entry Points

Order Hash

The order hash is sent to Paystack in two places for redundancy:

• metadata.order_hash
• metadata.custom_fields[].variable_name = "order_hash"

Either is read back during verification, so dashboard reporting and reconciliation both work.

Support

• Issues & Contributions: GitHub Repository
• Contact: tipowerup.com/contact
• Discord Community: tipowerup.com/social/discord