OmniPay Payment Test Demo / OmniPay 支付测试 Demo

🔧 Environment Status / 环境状态

🧪 TEST ENVIRONMENT / 测试环境 CHECKING

Using sandbox API for testing. Real transactions will NOT be processed. 使用沙盒 API 测试,不会处理真实交易.

🔧 API Configuration / API 配置

Spreedly Environment Key / Spreedly 环境 Key 💡 Default from mode, editable

Project Name / 项目名称 Choose a preset, or use Custom to enter project details manually. / 选择预设项目,或使用 Custom 手动填写项目配置.

Preset details / 预设说明

Pick a preset project, or choose Custom / 手动填写 to enter a project name and credentials manually.

可先选预设项目,或选择 Custom / 手动填写后自行输入项目名和 API 凭证.

Project Name / 项目名称 Enter production project name manually. 手动输入生产项目名称.

API Base URL / API 基础地址 Localhost pages default to local OmniPay API. 本地页面默认使用本地 OmniPay API.

API Username / API 用户名

API Password / API 密码

🎯 3DS Test Scenarios / 3DS 测试场景

3DS Test Profile / 3DS 测试 Profile The Demo profile controls test parameters and UI; backend configuration decides the 3DS path. / Demo Profile 控制测试参数和 UI,实际 3DS 路径由后台配置决定.

Profile behavior / Profile 行为说明

mode=test: Demo selects a 3DS test profile for parameters and UI only. Backend configuration decides the internal 3DS path.

测试模式: Demo 只选择 3DS 测试 profile,用于参数和 UI.内部 3DS 路径由后台配置决定.

mode=prod: no front-end 3DS profile selection; handle the backend response.

生产模式: 前端不选择 3DS 方式,按后端响应进入对应流程.

tpo: select a 3DS profile for internal production-channel testing; the Demo handles the low-level request shape internally.

tpo: 可选择 3DS profile 做内部生产通道测试;底层请求形态由 Demo 内部处理.

After AUTHENTICATE, the next action is decided by requiredAction; threeDsFlow is display and diagnostics only.

收到 AUTHENTICATE 后按 requiredAction 决定动作,threeDsFlow 仅用于展示和排查.

PMD 3DS Challenge Window / PMD 3DS 认证窗口 Only for iFrame card payments with requiredAction=PMD_3DS. The bank challenge is never embedded in an iframe. / 仅用于返回 requiredAction=PMD_3DS 的 iFrame 卡支付;银行认证页不会内嵌在 iframe 中.

Choose Test Scenario / 选择测试场景 💡 Basic payment without 3DS authentication. 基础支付不进行 3DS 认证.

Basic Payment / 基础支付: Standard payment processing without 3DS authentication. 不进行 3DS 认证的标准支付处理.

PCI Action / PCI 操作 Token payment sends one existing token in one /payments request; it never stores a card first. Token 支付只用现有 Token 调用一次 /payments,不会自动先存卡.需要先存卡再支付时,请先执行独立存卡,再执行 Token 支付.

Card storage / 卡保存方式

Use only the test cards shown at the top right. PCI payments submit the shared order, buyer, billing, shipping, cart, and browser fields required by the selected business type. 仅使用右上角测试卡.PCI 支付会按所选业务类型提交共用订单,买家,账单,收货,购物车及浏览器字段.

The original key, token, and stable inputs are reused. PAN/CVV never enter the parent page. / 沿用原键,Token 和稳定输入;PAN/CVV 不进入父页面.

Order Subject / 订单标题

MTSOPM Card defaults to 3DS; other MTSOPM methods use Order Subject. / MTSOPM 的 Card 默认 3DS,其他支付方式使用 Order Subject.

MTSOPM title guard / MTSOPM 标题保护

MTSOPM defaults to Card with subject 3DS. With MTSOPM, All and wallet modes force Order Subject and disable the 3DS preset to avoid a rejected AGPAY test request. Card titles remain editable. This internal Demo guard does not change OmniPay create-session subject validation.

MTSOPM 默认使用 Card 和标题 3DS.MTSOPM 的 All 和钱包模式会强制恢复 Order Subject 并禁用 3DS 预设,避免 AGPAY 测试请求被拒.Card 标题仍可编辑.该内部 Demo 保护不改变 OmniPay create-session 的 subject 校验合同.

Total Amount (smallest currency unit) / 总金额(最小货币单位) 💰 💡 Enter an integer in the currency's smallest unit. Standard e-commerce syncs from cart items. 输入币种的最小货币单位整数.标准电商由购物车自动同步;数字商品等流程可直接编辑.

Currency / 币种

Order ID / 订单 ID 💡 Auto-generated, editable. 自动生成,可编辑.

Local and sandbox testing only / 仅限本地和沙盒测试 This browser directly simulates a downstream merchant backend and sends Basic credentials plus PAN/CVV. Never use this pattern in production. 本浏览器直接模拟下游商户后端并发送 Basic 凭据及 PAN/CVV.生产环境严禁使用这种方式.

Idempotency-Key / 幂等键 A new Card API payment attempt requires a new key. 每个新的 Card API 支付尝试都需要新的幂等键.

Callback URL (optional HTTPS) / 回调地址(可选 HTTPS) Optional override; always query until OmniPay returns a terminal state. / 可选覆盖地址;仍须查询至 OmniPay 返回终态.

Callback and final status / 回调与终态说明

Buyer-page messages, selections, return, close, or timeout never prove success or failure. Keep querying until OmniPay returns SUCCESS or FAILED.

买家页面提示,选择,返回,关闭或超时都不能证明支付成功或失败.必须继续查询,直到 OmniPay 返回 SUCCESS 或 FAILED.

If set, callback_url overrides the environment order-status Webhook. The callback reuses paymentResult; Timestamp/sign appear only when callback signing is configured.

填写后,callback_url 覆盖环境订单状态 Webhook.回调复用 paymentResult;仅配置回调签名时发送 Timestamp/sign.

Redirect URL (optional HTTP/HTTPS) / 支付完成跳转地址(可选 HTTP/HTTPS) Used after payment completes. API Integration only. / 支付完成后重定向,仅 API 接入使用.

Website URL (optional HTTP/HTTPS) / 商户网站地址(可选 HTTP/HTTPS) Merchant website or Universal Link domain URL. API Integration only. / 商户网站或 Universal Link 域名 URL,仅 API 接入使用.

Optional HMAC request signing / 可选 HMAC 请求签名 Enable only when the selected sandbox project requires HMAC. 仅在当前沙盒项目已启用 HMAC 时勾选.

Timestamp Disabled / 未启用

Nonce -

Signature -

HMAC, CORS and source IP / HMAC、CORS 与来源 IP

The controlled sandbox allows the 4 HMAC headers only on Card API create/status CORS preflights. Other Demo API routes keep the basic header set, and unknown custom headers fail browser preflight.

受控沙盒只在 Card API create/status 的 CORS 预检中允许4个 HMAC Header.其他 Demo API 路由仍使用基础 Header 集合,未知自定义 Header 会导致浏览器预检失败.

An IP allowlist checks the actual connection source against registered exact IP or CIDR rules. This Demo never sends or simulates X-Forwarded-For.

来源 IP 限制按已登记的精确 IP 或 CIDR 规则检查真实连接来源.本 Demo 不发送或模拟 X-Forwarded-For.

A disabled restriction allows all sources. An enabled restriction with an empty allowlist rejects all sources.

来源 IP 限制关闭时允许所有来源;显式开启但清单为空时拒绝所有来源.

M-Wallet Direct Checkout / M-钱包直连收银台

Internal integration test: the browser calls OmniPay wallet APIs, then opens action.url or checkoutPageUrl based on the current setting. 内部联调:浏览器调用 OmniPay 钱包接口,再按当前设置打开 action.url 或 checkoutPageUrl.

Internal Demo / 内部测试 Demo

Wallet Business Type / 钱包业务类型 E-commerce wallet sends order context fields. 电商钱包会发送订单上下文字段.

Payment Method / 支付方式

Flow Mode / 流程模式 CHECKOUT returns a hosted checkout page. EMBEDDED uses an embedded payment flow. CHECKOUT 返回收银台页面.EMBEDDED 为内嵌支付流程.

Local Wallet Path / 本地钱包路径 Select only for EMBEDDED. It only controls which local Demo frontend entry is used. 仅在 EMBEDDED 下选择,只控制本地 Demo 使用哪套前端入口.

Open Mode / 打开方式 M-Wallet-SP APAY requires Safari; M-Wallet-PM APAY is not Safari-only. M-钱包-SP APAY 必须 Safari;M-钱包-PM APAY 不要求 Safari-only.

Return & Notify URLs / 回跳与通知地址 Keep defaults unless testing callback or notification integration. 通常保持默认,只在回调/通知联调时修改.

Browser Return URL / 浏览器返回 URL Only verifies browser return; it is not the final payment status. 只验证浏览器返回,不代表最终支付状态.

Browser Cancel URL / 浏览器取消 URL Only verifies browser cancel; it is not the final payment status. 只验证浏览器取消,不代表最终支付状态.

Webhook URL / Webhook 地址 Optional. Receives final OmniPay server events. 可选.接收 OmniPay 服务端最终事件.

Wallet Payment ID / 钱包支付 ID Auto-filled after creating the wallet order. 创建钱包订单后自动填入.

CHECKOUT starts auto polling; regular EMBEDDED requires continuing in iframe and querying status manually. CHECKOUT 会自动轮询;普通 EMBEDDED 需要在 iframe 内继续后手动查询状态.

S-Wallet Token-first / S-钱包 Token-first

Backend decides final gateway route. 后端决定最终网关路由.

Backend-routed / 后端路由

Advanced debug / 高级调试 Wallet payload capture and dry-run controls. 钱包 payload 捕获和 dry-run 控制.

S-Wallet token-first test path: this page opens the browser wallet, then calls OmniPay /wallet/purchase with page HTTP Basic. The page does not hold the Spreedly access secret and does not create a Spreedly payment method. S-钱包 token-first 测试路径:本页面拉起浏览器钱包后,用页面 HTTP Basic 调 OmniPay /wallet/purchase. 页面不持有 Spreedly access secret,不创建 Spreedly payment method.

Wallet Method / 钱包方式 Apple Pay and Google Pay both enter token-first after OmniPay backend creates the Spreedly wallet payment method. Apple Pay 和 Google Pay 均由 OmniPay 后端创建 Spreedly wallet payment method 后进入 token-first.

Google Pay Type / Google Pay 类型 GPAY supports TOKENIZED_CARD and NON_TOKENIZED_CARD. NON_TOKENIZED_CARD submits G-3DS parameters with /wallet/purchase. GPAY 支持 TOKENIZED_CARD 和 NON_TOKENIZED_CARD.NON_TOKENIZED_CARD 会随 /wallet/purchase 提交 G-3DS 参数.

Google Pay Country / Google Pay 国家 PaymentDataRequest transactionInfo.countryCode. PaymentDataRequest 的交易国家代码.

Google Pay Merchant ID / Google Pay 商户 ID GPAY production 需要.Google TEST 可留空.

CRYPTOGRAM_3DS only Request TOKENIZED_CARD/DPAN only. If the current device or account has no eligible card, Google Pay sheet may be unavailable. 仅请求 TOKENIZED_CARD/DPAN.若当前设备或账号无合格卡,Google Pay sheet 可能不可用.

Apple Pay Merchant ID / Apple Pay 商户 ID APAY merchant validation requires Safari, HTTPS, and local certificate configuration. APAY merchant validation 需要 Safari,HTTPS 和本地证书配置.

Apple Pay Country / Apple Pay 国家 ISO 3166-1 alpha-2 country code. ISO 3166-1 alpha-2 国家代码.

Encrypted Wallet Payment Data JSON / 加密钱包支付数据 JSON Auto-captured wallet data is used only for this submission and is not written into the input box. 自动捕获的钱包数据只用于本次提交,不写入输入框.

PayerMax Cashier / PayerMax 收银台

Standalone cashier test: create a Hosted Checkout session, then open the PayerMax checkout page. 独立收银台测试:创建 Hosted Checkout session 后打开 PayerMax 收银台页面.

Cashier / 收银台

Gateway ID / 网关 ID Optional. Leave empty to let backend auto-select the enabled PayerMax cashier gateway for the current project. 可选.留空时后端自动选择当前项目已开启收银台的 PayerMax 网关.

Payment Method / 支付方式 All/CARD/Wallet use full checkout filters. GP/AP reuse M-Wallet-PM checkout. All/CARD/Wallet 使用 full checkout 过滤.GP/AP 复用 M-钱包-PM 收银台链路.

Open Mode / 打开方式 Choose how to show the PayerMax checkout page after session creation. 选择创建 session 后如何展示 PayerMax 收银台页面.

Return URL / 返回地址 Sent as PayerMax frontCallbackUrl. Defaults to the current Demo page. 作为 PayerMax frontCallbackUrl 发送.默认使用当前 Demo 页面.

Expire Time / 过期时间 Required for new orders. expireTime is normalized to 1800..86400 seconds. 新订单必传.expireTime 按秒归一到 1800..86400.

User ID / 买家用户 ID * Required top-level user_id. Demo fills a unique ID by default (no hyphens); you can replace it with a stable buyer ID. 必填顶层 user_id.Demo 默认填入唯一 ID(不含连字符),也可改为稳定的买家 ID.

Session ID / 会话 ID Auto-filled after session creation, used for status query. 创建 session 后自动填入,用于查询状态.

Final payment result is based on server notification or query. 最终支付结果以服务端通知或查询为准.

Conflux Cash / Cash App 直连

Entry B: merchant server style create via OmniPay /wallet/payments. Does not use OmniPay Hosted Checkout. 入口 B:商户直连 OmniPay 后台创建,不经过自有收银台.调用 /wallet/payments.

Entry B / 商户直连

Payment Method / 支付方式 When gateway Cash App channel is NONE, this request value is used. 网关通道为「无」时,以上传的支付方式为准.

Open Mode / 打开方式 (WAP) WAP uses redirect handoff. WEB shows qrCode instead. WAP 走跳转;WEB 展示二维码链接.

Wallet Payment ID / 钱包支付 ID Auto-filled after create. Used as status transactionToken. 创建后自动填入,用作状态查询 transactionToken.

Return & Notify URLs / 回跳与通知地址 Keep defaults unless testing callback integration. 通常保持默认,只在回调联调时修改.

Browser Return URL / 浏览器返回 URL Browser return only. Not the final payment status. 只验证浏览器返回,不代表最终支付状态.

Browser Cancel URL / 浏览器取消 URL

Webhook URL / Webhook 地址 Optional. Receives OmniPay server events. 可选.接收 OmniPay 服务端事件.

Fixed DIGITAL_ENTERTAINMENT + CHECKOUT. No OmniPay cashier session. 固定数娱 + CHECKOUT.不创建 OmniPay 自有收银台 session.

OmniPay Cashier / OmniPay 收银台

Create a session, then open checkout_url in a new tab (default). 创建 session 后默认在新标签页中打开 checkout_url.

Business Type / 业务类型 Required; internal test projects default to DIGITAL_ENTERTAINMENT. / 必填;内部测试项目默认数娱,可手动切换.

Business field rules / 业务字段规则

Required. Internal test projects, including mtsopm and ax001-sandbox, default to DIGITAL_ENTERTAINMENT. You can still change the selection manually.

必填.内部测试项目(含 mtsopm,ax001-sandbox)默认数娱.仍可手动切换.

ECOMMERCE may include optional shipping fields from the main Billing Information section; only shipping Address Line 2 is optional within the shipping block. Cart Items must include at least one entry.

电商可通过主表单可选发送收货字段;收货块内仅地址行 2 可选.Cart Items 至少一项.

ECOMMERCE wallet sessions also send buyer first name, last name, cart items, billing, and shipping as immutable session context.

电商钱包 session 还会完整发送买家名,姓,商品,账单和收货信息,并将其作为不可变 session 上下文.

Payment Method Types / 支付方式 Required; All uses the environment's published methods. / 必传;All 使用环境当前已发布的支付方式.

Wallet behavior and regression / 钱包行为与回归

Required. All sends ["ALL"] and uses the environment's currently published methods. Apple Pay and Google Pay support ECOMMERCE and DIGITAL_ENTERTAINMENT when the matching wallet capability is published.

必传.All 发送 ["ALL"],使用环境当前已发布方式.环境发布匹配的钱包能力后,Apple Pay 和 Google Pay 支持 ECOMMERCE 和 DIGITAL_ENTERTAINMENT.

All checkout method lists start with no method selected and Pay disabled. The buyer must click the Card, Apple Pay, or Google Pay row.

All 收银台支付方式列表默认不选中任何方式,Pay 保持禁用.买家必须点击 Card,Apple Pay 或 Google Pay 行.

Every wallet-capable checkout starts unselected and prepares no wallet component, including All, Apple Pay-only, and Google Pay-only pages in top-level, same-origin, and cross-origin iframe contexts.

所有具备钱包能力的收银台页面都默认不选中且不准备钱包组件,包括顶层,同源,跨域 iframe 中的 All,Apple Pay-only 和 Google Pay-only 页面.

When Hosted Checkout runs inside any iframe, clicking Apple Pay selects only the Apple Pay row locally and shows "Currently unavailable in this environment" at the bottom. It does not prepare or mount Apple Pay, submit payment, or open another window. Card and Google Pay keep their existing iframe flows.

Hosted Checkout 位于任何 iframe 时,点击 Apple Pay 只会在当前页面选中 Apple Pay 行,并在底部显示“当前环境不支持”.不会准备或挂载 Apple Pay,不会提交支付,也不会打开其他窗口.Card 和 Google Pay 保持现有 iframe 流程.

On a top-level Hosted Checkout page, the buyer can click Apple Pay to prepare it normally.

在顶层 Hosted Checkout 页面中,买家点击 Apple Pay 后可按正常流程准备该钱包.

Internal Google Pay Regression / 内部 Google Pay 回归

Internal Google Pay long-interaction regression only: after an authorized sandbox deployment, keep the wallet sheet open for at least 45 seconds on PC Safari and iPhone Safari/Chrome before confirming. This is a minimum regression wait, not a local authorization timeout. While the session has not reached expires_at, waiting for minutes must stay available and retryable. Only session expiration may stop the interaction, and it must show "Order expired" instead of "Currently unavailable in this environment".

仅用于内部 Google Pay 长交互回归:沙盒获授权部署后,在 PC Safari 和 iPhone Safari/Chrome 中打开钱包页面并至少等待 45 秒再确认.45 秒只是最小回归等待,不是本地授权超时.只要 session 尚未到 expires_at,等待数分钟后仍必须保持可用且可重试.只有 session 到期才可停止交互,并显示“订单已过期”,不得显示“当前环境不支持”.

Open Mode / 打开方式 Default: new tab. The inline iframe option remains available only for internal Demo testing and is not a published merchant integration contract. 默认使用新标签页.内嵌 iframe 选项仅保留用于内部 Demo 测试,不属于已发布的商户接入合同.

Merchant opening contract / 商户打开合同

Hosted Checkout does not allow merchant iframe embedding in production. The published merchant contract is top-level navigation, a new tab, or a popup. Inline iframe below is for internal Demo testing only.

生产环境 Hosted Checkout 不允许商户 iframe 嵌入.对外商户合同为顶层跳转,新标签页或弹窗.下方内嵌 iframe 仅用于内部 Demo 测试.

Expire Time / 过期时间

User ID / 买家用户 ID Required top-level user_id. Demo fills a unique ID by default (no hyphens); you can replace it with a stable buyer ID. 必填顶层 user_id.Demo 默认填入唯一 ID(不含连字符),也可改为稳定的买家 ID.

Checkout Session ID / 会话 ID

Filled after create; used for status query and return handling. 创建后自动填入,用于状态查询和回跳处理. New Order resets the current session and generates a new Order ID without reloading this page. 新订单会重置当前 session 并生成新的 Order ID,无需刷新页面.

Success URL / 成功回跳 Required browser return; never sent upstream. / 必填浏览器回跳地址,绝不会发送给上游.

Success return behavior / 成功回跳行为

Merchant browser return only. The success page returns here after the OmniPay-configured countdown, which defaults to 10 seconds, or explicit Close. It is never sent to an upstream gateway/provider.

仅用于浏览器返回商户.成功页按 OmniPay 配置的倒计时返回这里,未单独配置时默认为10秒;点击 Close 可立即返回.绝不会发送给上游网关/provider.

Failure URL / 失败回跳 Required browser return; never sent upstream. / 必填浏览器回跳地址,绝不会发送给上游.

Failure and expiry return / 失败与过期回跳

Merchant browser return only. A failed payment returns here after the OmniPay-configured countdown, which defaults to 10 seconds, or explicit Close. An expired session uses this URL only after Back to Merchant, without a countdown. It is never sent upstream.

仅用于浏览器返回商户.支付失败页按 OmniPay 配置的倒计时返回这里,未单独配置时默认为10秒;点击 Close 可立即返回.session 过期页不启动倒计时,仅在点击 Back to Merchant 后使用该地址.绝不会发送给上游.

Cancel URL / 取消回跳 Optional browser return; blank keeps the result page open. / 可选浏览器回跳;留空时停留在结果页.

Cancellation return behavior / 取消回跳行为

Optional merchant browser return only. A cancel response may return here immediately. If payment processing already won the race, the payment remains processing; browser return does not prove cancellation. If blank, a completed cancellation stays on its result page with no automatic countdown.

可选,仅用于浏览器返回商户.取消响应可以立即返回这里;如果支付处理已在竞态中生效,支付仍保持处理中,浏览器回跳不代表已取消.留空时,已完成取消会停留在结果页且不启动自动返回倒计时.

Shared return URL policy / 回跳地址通用规则

Success and failure URLs are required; cancel is optional. Public return URLs require HTTPS. Sandbox test environments automatically allow exact http://localhost[:port] and http://127.0.0.1[:port]; production always rejects HTTP and loopback. This exception does not apply to callback_url.

成功和失败地址必填,取消地址可选.公网返回地址必须使用 HTTPS.Sandbox 测试环境自动允许精确的 http://localhost[:port] 和 http://127.0.0.1[:port];生产环境始终拒绝 HTTP 和 loopback.该例外不适用于 callback_url.

Apps should use an HTTPS H5 fallback, Android App Link, or iOS Universal Link; custom schemes are rejected.

APP 使用带降级页的 HTTPS H5,Android App Link 或 iOS Universal Link;不接受自定义 scheme.

The OmniPay cashier navigates only to the backend response redirect_url; this Demo never selects a create-request URL from page status. The return URL includes checkout_session_id.

OmniPay 收银台只导航到后端响应的 redirect_url;本 Demo 不会根据页面状态从创建请求中自行选择返回地址.返回地址会附加 checkout_session_id.

Merchant Webhook URL / 商户支付结果 Webhook(可选) Optional server-to-server result endpoint; browser return is not a terminal result. / 可选服务端结果地址;浏览器回跳不代表终态.

Webhook delivery and fallback / Webhook 投递与回退

OmniPay server sends signed payment results to this merchant server endpoint.

OmniPay 服务端向该商户服务端地址推送已签名支付结果.

If set, this request URL overrides the project ORDER_STATUS Webhook and is the only delivery target for this session. If blank, OmniPay falls back to the configured project Webhook.

填写时,本次请求地址覆盖后台项目 ORDER_STATUS Webhook,该 session 只向本次地址投递.留空时才回退到后台项目地址.

If neither exists, no Webhook is sent; use Query. The selected target is retried until HTTP 200.

两边都未配置时不会发送 Webhook,请使用 Query.选定地址会重试至 HTTP 200.

Browser return is not payment success. Final state uses a verified Webhook or Query.

浏览器回跳不能当作支付成功.终态以已验签 Webhook 或 Query 为准.

Use New Order before Create to start another payment without reloading. / 发起另一笔支付前点击 New Order,无需刷新页面.

Create, replay and status rules / 创建、重放与状态规则

An idempotent replay returns a new authoritative checkout_url; the previous URL expires.

幂等重放会返回新的 checkout_url,旧链接随即失效.

Merchant reference flow: server creates the session, frontend opens checkout_url, then server confirms status by webhook or query. The 8080 proxy and open-mode selector are internal Demo tools.

商户参考流程:服务端创建 session,前端打开 checkout_url,服务端再通过 Webhook 或查询确认终态.8080 代理和打开方式选择仅用于内部 Demo.

Order ID rule: both create buttons always submit the current Order ID shown above.

订单号规则: 两个创建按钮始终提交上方当前的 Order ID.

While the session is non-terminal, the same Order ID plus the same amount, currency, business type, user_id and payment method returns the same checkout session and a refreshed checkout_url.

session 仍为非终态时,相同 Order ID,金额,币种,业务类型,user_id 和支付方式会返回同一个 checkout session 和刷新后的 checkout_url.

A terminal replay returns data.code 485-488 with no checkout_url. A changed immutable fact returns data.code 470 (ORDER_CONFLICT).

终态重放返回 data.code=485-488 且不返回 checkout_url.同一 Order ID 下变更金额,币种,业务类型,user_id 或支付方式会返回 data.code=470.

The first success, failure and cancel URLs stay frozen; replay does not compare or update them. Use a new Order ID to change them.

首次成功,失败和取消回跳地址保持不变;重放不会比较或更新它们.需要更换地址时请使用新的 Order ID.

To start a new order, click New Order or change the Order ID above before clicking Create.

要创建新订单,请点击 New Order / 新订单,或修改上方 Order ID 后再点击创建.

Checkout opens only when data.code=200, data.status=PENDING and checkout_url is present.

仅在 data.code=200、data.status=PENDING 且存在 checkout_url 时打开.

🛒 Cart Items / 购物车商品

Required for e-commerce purchases. 电商购买必填.

Manage products in your cart. E-commerce requires at least one item. 管理购物车商品.电商至少需要一项商品.

Upsell 1 Amount (USD) / 加购 1 金额

Upsell 2 Amount (USD) / 加购 2 金额

Test: upsell minimum $15.00 USD. 测试环境加购最低 $15.00 USD.可直接输入金额或从建议值中选择.

🛒 Cart Total / 购物车总额: $15.00 USD 💡 Cart total auto-syncs to payment amount above. 购物车总额会自动同步到上方支付金额.

🎫 Global Coupons / 全局优惠券

Add general discount coupons for your order (optional). 为订单添加通用优惠券(可选).

Coupons here apply to the entire order. 这里的优惠券作用于整笔订单.

💡 Global coupons apply to the entire order and are separate from individual product coupons. 全局优惠券作用于整笔订单,与单个商品优惠券分开计算.

📋 Buyer & Billing Context / 买家与账单信息 Cardholder and billing fields used by the current flow. / 当前流程使用的持卡人与账单字段. Required / 必需

Flow-specific billing requirements / 各流程账单要求

Card API ECOMMERCE requires name, phone, complete billing and shipping. Card API DIGITAL_ENTERTAINMENT requires email and country; name, phone and street-level billing are normally optional.

Card API 电商必填姓名,电话,完整账单和收货信息.Card API 数娱必填邮箱和国家;姓名,电话及街道级账单通常选填.

First Name / 名

Last Name / 姓

Phone Number / 电话号码 (Optional / 选填) 💡 Include country code (e.g., +1 for US). Leave blank to omit. 请包含国家区号,例如美国 +1.可留空,留空时不发送该字段. Hosted Checkout and iFrame: blank values are omitted from the request. / Hosted Checkout 与 iFrame: 留空时不发送该选填字段.

Email Address / 邮箱地址 Hosted Checkout requires a valid email format after trimming. It does not verify DNS, MX, mailbox existence, or deliverability. Hosted Checkout 去除首尾空白后校验邮箱格式,不验证 DNS,MX,邮箱是否存在或是否可投递.

Country / 国家或地区 * Hosted Checkout sends this as buyer.billing_country_code. The buyer may choose another supported country on the new-card page. Hosted Checkout 将此值作为 buyer.billing_country_code 发送.买家可在新卡页改选其他受支持国家.

Include Billing Address Details / 包含账单地址明细 Optional for non-ecommerce flows. Check to edit Demo defaults below; uncheck to omit city/street/state/zip. Country above is always sent separately. 非电商流程可选.勾选后可编辑下方 Demo 默认值,不勾选则不传城市/街道/州/邮编.上方 Country 始终单独发送.

Include Shipping Address / 包含收货地址 Required and locked for Card API ECOMMERCE. Other ECOMMERCE flows may keep their own shipping rules. Card API 电商必填并锁定.其他电商流程沿用各自收货规则.

✅ Billing same as Shipping / 账单地址同收货地址 💡 Shown when billing details are included. Syncs billing into shipping fields below. 仅在已包含账单明细时显示.勾选后将账单值同步到下方收货字段.

🚚 Shipping Address / 收货地址

Shipping Phone Number / 收货电话 💡 Include country code (e.g., +1 for US). 请包含国家区号,例如美国 +1.

Shipping Country / 收货国家或地区

Shipping City / 收货城市

Shipping Address / 收货地址

Shipping Address 2 (Optional) / 收货地址 2(可选)

Shipping State/Province / 收货州或省

Shipping Zip/Postal Code / 收货邮编 💡 Auto-filled based on selected state

Payment Information / 支付信息

Secure checkout powered by Spreedly tokenization. 由 Spreedly Tokenization 提供安全收银能力.

iFrame access and Enhanced Security / iFrame 接入与增强安全

Merchant-operated Spreedly iFrame access and Enhanced Security are independent settings. Disabling iFrame access blocks this Demo path; disabling only Enhanced Security uses the documented unsigned compatibility flow.

商户自接 Spreedly iFrame 能力与 Enhanced Security 是两个独立开关.关闭 iFrame 接入会阻断当前 Demo 路径;仅关闭 Enhanced Security 时使用文档约定的无签名兼容流程.

For PMD 3DS, the full bank challenge opens in the selected tab or window, never inside an iframe. The Demo queries the original order for its final status.

PMD 3DS 会在所选页签或窗口打开完整银行认证页,不会内嵌在 iframe 中.Demo 查询原订单终态.

VISA

Card Number / 卡号

Expiration Date / 有效期

CVV/CVC/CSC / 安全码

New card / 新卡 Direct PAN/CVV for this purchase / 直接发送本次支付所需的 PAN/CVV Buyer-initiated saved card / 买家主动保存卡复购 Send only the Omnipay saved payment method ID / 只发送 Omnipay 保存卡 ID

Customer ID / 买家 ID Buyer's user ID in the merchant system, optional. For example: user-1001. 买家在商户系统中的用户编号,选填.例如 user-1001.

Card Number / 卡号

Expiration Date / 有效期

CVV/CVC/CSC / 安全码

🛡️ Norton Secured

🔒 McAfee Secure

✓ Verified by Visa

🔐 Mastercard SecureCode

Card API payment state / Card API 支付状态

No Card API request submitted. / 尚未提交 Card API 请求.

IDLE

Payment ID / 支付 ID -

Saved payment method ID / 保存卡 ID -

Polling / 轮询 Stopped / 已停止

Action URL and polling / Action URL 与轮询

This internal sandbox Demo displays and opens the exact action.url returned by OmniPay. It does not infer whether the backend returned a wrapper or another validated URL.

此内部 sandbox Demo 显示并原样打开 OmniPay 返回的 action.url,不会推断后端返回的是包装地址还是其他已校验地址.

The default OmniPay wrapper is valid for 30 minutes. Always use expires_at from the response when present.

默认 OmniPay 包装地址有效期为30分钟.响应包含 expires_at 时始终以该字段为准.

Browser return, close, or timeout never creates a terminal result. Keep polling OmniPay status.

浏览器返回,关闭或超时都不会产生支付终态.请继续轮询 OmniPay status.

📋 API Request & Response Log / API 请求与响应日志

Latest request first. Sensitive values are masked. / 最近请求在前,敏感值已脱敏.

No API requests recorded. / 暂无 API 请求记录.

🔄 Processing your payment... 正在处理支付...

Please do not close this window. 请不要关闭此窗口.

OmniPay Payment Test Demo / OmniPay 支付测试 Demo

🔧 Environment Status / 环境状态

🔧 API Configuration / API 配置

💳 Payment Flow Type / 支付流程类型

PCI Hosted Checkout Integration / PCI 托管收银台接入

PCI iFrame Integration / PCI iFrame 接入

PCI API Integration / PCI API 接入

Legacy API Integration / 旧 API 接入

Legacy Spreedly iFrame / 旧 Spreedly iFrame

Provider Hosted Checkout / 服务商托管收银台

Wallet / 钱包

🎯 3DS Test Scenarios / 3DS 测试场景

🚀 Production Environment / 生产环境

M-Wallet Direct Checkout / M-钱包直连收银台

S-Wallet Token-first / S-钱包 Token-first

PayerMax Cashier / PayerMax 收银台

Conflux Cash / Cash App 直连

OmniPay Cashier / OmniPay 收银台

🛒 Cart Items / 购物车商品

🎫 Global Coupons / 全局优惠券

📎 Digital Billing Fields / 数字产品账单字段

🚚 Shipping Address / 收货地址

Payment Information / 支付信息

Card API payment state / Card API 支付状态

🔐 3D Secure Authentication / 3D Secure 认证

✅ Payment Successful! / 支付成功!

电商 Upsell

🚀 Final Offer - Premium Support / 最终优惠 - 高级支持

🎉 All Transactions Complete! / 所有交易已完成!

📋 Transaction Summary / 交易汇总:

OmniPay Payment Test Demo / OmniPay 支付测试 Demo

🔧 Environment Status / 环境状态

🔧 API Configuration / API 配置

💳 Payment Flow Type / 支付流程类型

PCI Hosted Checkout Integration / PCI 托管收银台接入

PCI iFrame Integration / PCI iFrame 接入

PCI API Integration / PCI API 接入

Legacy API Integration / 旧 API 接入

Legacy Spreedly iFrame / 旧 Spreedly iFrame

Provider Hosted Checkout / 服务商托管收银台

Wallet / 钱包

🎯 3DS Test Scenarios / 3DS 测试场景

🚀 Production Environment / 生产环境

M-Wallet Direct Checkout / M-钱包直连收银台

S-Wallet Token-first / S-钱包 Token-first

PayerMax Cashier / PayerMax 收银台

Conflux Cash / Cash App 直连

OmniPay Cashier / OmniPay 收银台

🛒 Cart Items / 购物车商品

🎫 Global Coupons / 全局优惠券

📎 Digital Billing Fields / 数字产品账单字段

🚚 Shipping Address / 收货地址

Payment Information / 支付信息

Card API payment state / Card API 支付状态

🔐 3D Secure Authentication / 3D Secure 认证

🏦 Bank Authentication Required / 需要银行认证

✅ Payment Successful! / 支付成功!

电商 Upsell

🚀 Final Offer - Premium Support / 最终优惠 - 高级支持

🎉 All Transactions Complete! / 所有交易已完成!

📋 Transaction Summary / 交易汇总: