外掛說明

Allscale Checkout is a WordPress plugin (built as a WooCommerce payment gateway) that lets your customers pay with crypto while funds settle instantly as USDT stablecoin directly to your wallet — Allscale never holds your money.

Why use Allscale?

Non-custodial. Funds go straight to your wallet. No third party holds your money. No account freezes.
Low fees. 0.6% per transaction with a $0.10 minimum (vs. ~3% on traditional processors).
Instant settlement. On-chain USDT — no waiting days for payouts.
Permissionless setup. Sign up, paste your credentials, start accepting payments.

Features

Native WooCommerce payment gateway.
HMAC-SHA256 request signing and webhook verification (timing-safe).
Test-connection button + automatic credential validation on save.
Per-order Allscale Payment meta box: tx hash with block-explorer link, payment-method type, paid / fee / net breakdown.
Webhook health observation: last-received timestamp, first-webhook celebration, stale-webhook warning.
HPOS compatible. Block-based checkout compatible.
Full i18n with text domain allscale-checkout.

Requirements

WordPress 5.8+
WooCommerce 6.0+
PHP 7.4+
An Allscale account with Commerce enabled

External services

This plugin connects to Allscale’s API at https://openapi.allscale.io so your customers’ payments can be created, confirmed, and settled to your wallet. Specifically:

What is sent to Allscale, and when:

On settings save and on every “Test connection” click: the API key and a signed GET /v1/test/ping request — verifies the credentials are correct without sending order data.
When a customer clicks “Place order” with Allscale selected: a signed POST /v1/checkout_intents/ with the order’s total amount in cents, currency (or stable-coin enum), your store’s order number, an order description (the names of items in the cart, truncated), the customer’s WooCommerce user ID and billing name, and the WooCommerce thank-you URL to redirect them back to after payment.
When the customer lands back on the thank-you page: a signed GET /v1/checkout_intents/{id} to read the on-chain transaction details and reconcile the order.

What Allscale sends back, and when:

Hosted checkout URL — the page your customer is redirected to to actually pay.
Webhook callbacks — when an on-chain payment confirms, Allscale POSTs a signed message to https://your-site.com/wc-api/allscale_checkout containing the transaction hash, chain ID, the on-chain settled amount in USDT, and the payment method type. The plugin verifies the HMAC-SHA256 signature before applying any state change.

Service terms and privacy:

Allscale’s terms of service: https://www.allscale.io/agreement
Allscale’s privacy policy: https://www.allscale.io/policy

Using this plugin makes your WooCommerce store an integration partner of Allscale. By installing and configuring it, you agree to Allscale’s terms.

Privacy

This plugin does not collect any analytics, telemetry, or user data on its own. It does not “call home” to allscale-io or any third party other than the Allscale API documented above.

Personal data this plugin transmits to Allscale for the purpose of processing each order:

The customer’s WooCommerce user ID (an internal numeric ID, only if they’re a logged-in customer)
The customer’s billing first + last name
The order number and total amount
A short description of the items in the order (product names, truncated to 200 characters)

Personal data this plugin stores locally in the WordPress database, on each order:

The Allscale checkout intent ID
The on-chain transaction hash (public blockchain data)
The settled amount, fee, and net amount in USDT
The chain ID and payment-method type

No card numbers, no wallet seed phrases, no private keys, and no email addresses are sent or stored by this plugin.

螢幕擷圖

The "needs WooCommerce" notice that appears if the plugin is activated on a site that doesn't yet have WooCommerce — one click installs or activates it. — The “needs WooCommerce” notice that appears if the plugin is activated on a site that doesn’t yet have WooCommerce — one click installs or activates it.

The gateway settings page in its healthy steady state: credentials verified, connection confirmed, webhook receiving. — The “needs WooCommerce” notice that appears if the plugin is activated on a site that doesn’t yet have WooCommerce — one click installs or activates it.

安裝方式

Upload the plugin ZIP via Plugins Add New Upload Plugin.
Activate the plugin.
Go to WooCommerce Settings Payments Allscale Checkout.
Paste your API key and secret from your Allscale dashboard.
Click Test connection, then Save changes.
Copy the webhook URL shown in settings and paste it into your Allscale store’s webhook field.

常見問題集

Does sandbox mode work?: Sandbox mode has been retired. To test without real payments, create a test store in your Allscale dashboard and use its credentials. Both test and production stores share the same openapi.allscale.io base URL.
Can the plugin configure the webhook URL automatically?: No — Allscale does not expose webhook-management API endpoints. The merchant must paste the URL into the Allscale dashboard manually. The plugin shows when a webhook was last received so misconfigurations surface quickly.
Are automatic refunds supported?: No. Allscale is non-custodial; funds settle directly to your wallet. To refund a customer, send the amount back from your wallet, then update the order status in WooCommerce.
Which currencies are supported?: USD, AUD, CAD, CNY, EUR, GBP, HKD, JPY, SGD. You can also enable native USDT pricing for crypto-first stores.

使用者評論

這個外掛目前沒有任何使用者評論。

參與者及開發者

以下人員參與了開源軟體〈Allscale Checkout〉的開發相關工作。

allscaleio

將〈Allscale Checkout〉外掛本地化為台灣繁體中文版

對開發相關資訊感興趣？

任何人均可瀏覽程式碼、查看 SVN 存放庫，或透過 RSS 訂閱開發記錄。

變更記錄

1.0.0

First stable release. The plugin is now considered production-ready after the v0 hardening cycle. No breaking changes from 0.0.5 — existing settings, credentials, and order meta carry over untouched.
Plugin name simplified to “Allscale Checkout” (dropped the redundant “for WordPress” suffix). Slug, class names, namespaces, option keys, hook names, and the text domain are unchanged.
Compatibility verified with WordPress 7.0 and WooCommerce 10.8.
Hardening: admin asset-enqueue now unslashes and sanitizes the $_GET page-detection values.
Plugin Check pass: form-control output now routed through wp_kses allowlist, translator comments repositioned for i18n linting, removed the discouraged load_plugin_textdomain call (WordPress.org auto-loads translations) and the now-unused Domain Path header, and trimmed the readme short description to 150 characters.
Review prep: moved the thank-you polling and setup-wizard inline scripts into enqueued JS files, removed the default customer-facing “Powered by” attribution from the gateway description (admins can add their own), and corrected the terms/privacy URLs.

0.0.5

Packaging hygiene: release ZIPs now exclude dev-only content (.wordpress-org/ marketplace assets, internal docs/, dev-facing README.md) via a .distignore file. v0.0.4 ZIPs accidentally bundled all of that — merchants now get only the runtime code. No code-behavior changes.

0.0.4

WordPress.org submission prep: added == External services == and == Privacy == readme sections required by WordPress.org for any plugin that communicates with an external API. Added == Screenshots == section referencing the four images in .wordpress-org/. No code-behavior changes.

0.0.3

Renamed: plugin headline framing changed from “for WooCommerce” to “for WordPress”. The plugin still requires WooCommerce (and still ships as a WC payment gateway under the hood) — that’s now positioned as a dependency rather than the marketing headline. Class names, namespaces, option keys, hook names, and the text domain are unchanged.
GitHub repository renamed from allscale-checkout-woocommerce to allscale-wordpress-plugin. Old URLs continue to redirect via GitHub’s rename mechanism.

0.0.2

Remove Api_Client::get_intent_status() — dead code, never called (the return-URL fallback uses get_intent_details for full fields). Restore in 5 lines if a future polling path needs it.
Documentation accuracy: clarify in architecture.md that Admin::render_notices ships 4 notice types (settings save result, first webhook, sandbox migration, credentials missing) and the other 3 from the design brief live in their own surfaces (WC-required notice in Plugin, currency-unsupported inline on the settings page, activation/get-started via the setup wizard).

0.0.1

First pre-release of the AllScale Checkout rewrite. Deliberately labeled v0 — not yet production-stable, expect rough edges.

Major changes vs the prior 0.1.x community beta:

Sandbox toggle removed (Allscale API consolidated to one base URL — use test-store credentials to test).
Status enum expanded from 6 to all 12 documented Allscale states.
Return-URL fallback now reads full intent details (the 0.1.x fallback used the wrong endpoint and never worked correctly).
redirect_url moved to top level; user_id / user_name now sent.
Allscale error codes mapped to user-facing copy.
0.1 USDT minimum payment enforced up-front.
Settings save validates credentials via /v1/test/ping before storing them.
New: 4-step setup wizard on first activation.
New: Test connection button in settings (AJAX-backed).
New: Allscale Payment meta box on each order — status pill, paid/fee/net breakdown, tx hash with block-explorer link, payment-method type, chain badge.
New: Front-end thank-you status block (confirmed / pending with auto-refresh / failed).
New: Webhook health observation (last-received timestamp, first-webhook celebration, stale-after-7-days warning).
New: Native USDT pricing opt-in for crypto-first stores.
New: Branded “needs WooCommerce” notice with one-click Install or Activate CTA.
Fixed: Webhook handler now registered unconditionally on init, no longer dependent on the gateway constructor running.
Fixed: mb_strimwidth for order descriptions — CJK / emoji product names no longer get sliced mid-character.
Fixed: Order_Locker mutex around state mutations — webhook + return-URL fallback can’t race.
Fixed: Late failure-state webhooks no longer revert already-paid orders.
Fixed: cancelled added to terminal-status exclusion.
Fixed: Gateway and Blocks_Integration classes now lazy-loaded after their WooCommerce parents are confirmed available — avoids a fatal when this plugin loads before WooCommerce.
Full i18n with text domain allscale-checkout.