Payment providers

Payment is configured in two data fields plus encrypted credentials — no code, no rebuild. You choose which methods appear at checkout and which gateway backs them; the gateway itself is a shared, versioned package.

What’s available

Method / gateway	What it is
cod	Cash on delivery — a built-in method, no gateway credentials needed. Pair it with COD & fraud review.
sslcommerz	SSLCommerz online gateway (the shipped adapter).

More gateways are added by version bump, for everyone. The checkout call site is provider-agnostic — switching the gateway changes only which adapter runs.

The settings

Set in the deep-ops console under Core → Tenant configs.

Setting	Purpose	Default	Where
payment_methods	The methods offered at checkout, e.g. ["cod","sslcommerz"]	["cod"] (serializer fallback)	Tenant config → Commerce
payment_provider	The gateway package to use for online payments	blank → the first gateway with credentials	Tenant config → Providers
gateway credentials	API keys / secrets for the gateway	—	Integrations (encrypted)

Payment has no env default provider

Unlike couriers and SMS, payment has no *_DEFAULT_PROVIDER env var. What’s offered is driven by the payment_methods list; the online gateway is resolved from payment_provider (or the first gateway that has credentials). Cash on delivery needs no gateway at all.

Wiring an online gateway

1. Add the gateway to payment_methods (e.g. include "sslcommerz").
2. Add the gateway’s credentials as an App integration — encrypted at rest automatically.
3. Set payment_provider to the gateway’s name (or leave blank to use the first gateway that has credentials).

Credentials are handled securely — and never echoed

Gateway API keys and secrets live only in the encrypted Integrations store (AppIntegration, Fernet-encrypted at rest). They are never stored in the tenant config, never written to .env alongside your other settings, and never returned by the public config endpoint (/api/config exposes public values only, by construction). The config only ever names which provider is active — never its secret.

Related: Courier providers · SMS provider · Upgrading a provider package.