Al Qaseh Payment Gateway

The Al Qaseh Payment Gateway is a comprehensive solution designed to facilitate secure, seamless, and efficient payment processing for online transactions. It provides merchants with a robust platform to integrate payment capabilities directly into their websites or mobile applications, supporting a wide variety of payment scenarios.

The gateway is built to accommodate two primary types of merchants:

• PCI-DSS Certified Merchants: Merchants who are PCI-DSS compliant and prefer to handle payments directly through secure API calls.
• PCI-DSS Non-Certified Merchants: Merchants who do not handle sensitive card information directly. Instead, they can utilize a pre-built secure payment page hosted by Al Qaseh to process payments safely.

This gateway is suitable for businesses of all sizes that require a reliable and scalable payment solution, ensuring compliance with industry standards for data security and privacy.

Scope of the Document

This documentation is intended for software engineers and developers who are responsible for integrating the Al Qaseh Payment Gateway into their e-commerce platforms, mobile applications, or internal systems. It covers:

• API Endpoints: Detailed specifications for the available API operations, including payment creation, processing, and status checking.
• Integration Flows: Guidelines for integrating payment flows for both Certified and Non-Certified merchants.
• Security Requirements: Best practices for secure implementation, data handling, and ensuring compliance with PCI-DSS standards.
• Testing and Troubleshooting: Information on using the test environment, testing payment flows, and addressing common integration issues.

This guide will help you understand how to make API calls to create payment contexts, securely process payments, and handle post-payment workflows, such as redirection and webhook notifications.

Features of Al Qaseh Payment Gateway

• Support for Different Merchant Types: Certified merchants can handle payments directly using API calls, while Non-Certified merchants can use a secure payment page hosted by the platform.
• API-Driven Payments: All payment operations can be initiated and managed through REST APIs, which ensures easy integration with various platforms.
• Secure Payment Processing:
  • PCI-DSS Certified merchants have the flexibility to integrate directly while maintaining compliance with stringent PCI-DSS requirements.
  • PCI-DSS Non-Certified merchants redirect customers to a secure payment page managed by Al Qaseh, eliminating the need to handle sensitive cardholder information.
• Real-Time Webhooks and Redirects:
  • The platform provides webhook notifications to inform merchants about the status of each payment.
  • Redirection URLs guide customers to a merchant-specified page after the transaction, ensuring a smooth user experience.
• Support for Different Payment Flows:
  • Single Payments for one-time purchases.
  • Flexibility for merchants to handle different types of products and services, including both digital and physical goods.

Requirements

To integrate with the Al Qaseh Payment Gateway, you need:

• Network Connectivity: Ensure your systems can connect to the Al Qaseh API endpoints securely over HTTPS.
• API Authentication: You will need a set of credentials (e.g., Basic Auth) that authenticate your system’s requests to the payment gateway. These are provided once you register as a merchant.
• Programming Requirements: Familiarity with REST APIs, JSON data structures, and common HTTP methods (GET, POST).

Supported Payment Scenarios

The payment gateway supports various transaction scenarios, ensuring flexibility for different types of businesses:

• PCI-DSS Certified Payment Flows: These involve direct API interactions where merchants have full control over the payment process.
• PCI-DSS Non-Certified Payment Flows: Customers are redirected to a secure payment page to enter their card details, which reduces the PCI scope for the merchant.