Apple Pay

Accept Apple Pay on Kashier's hosted checkout page, on your own website with the Kashier SDK, or inside your own iOS app. Customers on Apple devices pay with the card saved in their Apple Wallet.

Choose your setup

Pick the row that matches where your customers pay.

What each setup needs:

You can combine setups. For example, your iOS app can use your own certificates while your website keeps using Kashier's certificates. Kashier reads which certificate each Apple Pay payment was encrypted for and decrypts it with the matching key. If you never turn on your own certificates, nothing changes for you.

Kashier hosted checkout page

If you send customers to Kashier's hosted checkout page (the sessionUrl of a payment session), Apple Pay is offered on that page with no setup on your side.

Use Kashier's Apple Pay certificates

Use this setup to show the Apple Pay button on your own website without an Apple Developer account. Kashier registers your domain with Apple under Kashier's Apple Pay account.

Prerequisites

Before implementing the Kashier Apple Pay integration, ensure you have:

1. A website with HTTPS enabled
2. Provided your website domain to Kashier's team so it can be verified with Apple
3. The Kashier SDK script

Step 1: Domain registration

Share your website URL with the Kashier support team so Kashier can register your domain with Apple.

Step 2: Certificate installation

After receiving the Apple Pay domain-association file from Kashier:

1. Access your website's root directory
2. Create a .well-known directory if it does not exist
3. Upload the file to this directory
4. Ensure the file is accessible at: https://your-domain.com/.well-known/apple-developer-merchantid-domain-association.txt

Then add the SDK to your checkout page as described in Website implementation.

Use your own Apple Pay certificates

If you have an Apple Developer account, you can run Apple Pay under your own Merchant ID and certificates. Apple then encrypts payments for your own Payment Processing Certificate, and Kashier decrypts them with the private key you upload. You need this setup to accept Apple Pay in your iOS app, and you can also use it on your website.

What you need

You create all of these in your Apple Developer account (Certificates, Identifiers & Profiles). You also need a computer with OpenSSL (macOS includes it) to create the private keys.

Create your Merchant ID and certificates

1. Merchant ID. In Certificates, Identifiers & Profiles > Identifiers > Merchant IDs, find or create your Merchant ID, for example merchant.com.yourcompany.
2. Payment Processing Certificate (required). Create it for that Merchant ID from a certificate signing request (CSR) whose private key is an EC P-256 (prime256v1) key.
3. Merchant Identity Certificate (website only). Create it for the same Merchant ID. Skip it if you accept Apple Pay only in your iOS app.

# 1. EC P-256 private key
openssl ecparam -genkey -name prime256v1 -noout -out payment_processing.key
# 2. Certificate signing request (enter a 2-letter Country Name, for example EG)
openssl req -new -key payment_processing.key -out payment_processing.csr
# 3. Upload the CSR in Apple Developer: Merchant IDs > your Merchant ID >
#    Apple Pay Payment Processing Certificate > Create Certificate, then download apple_pay.cer
# 4. Optional: convert the certificate to PEM
openssl x509 -inform DER -in apple_pay.cer -out payment_certificate.pem

# 1. RSA 2048 private key
openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 -out merchant_identity.key
# 2. Certificate signing request
openssl req -new -key merchant_identity.key -out merchant_identity.csr
# 3. Upload the CSR in Apple Developer: Merchant IDs > your Merchant ID >
#    Apple Pay Merchant Identity Certificate > Create Certificate, then download merchant_id.cer
# 4. Optional: convert the certificate to PEM
openssl x509 -inform DER -in merchant_id.cer -out merchant_certificate.pem

Upload your certificates to Kashier

In the Kashier dashboard, open Settings > Device Payment Configuration > Apple Pay:

1. Turn on Use my own certificates.
2. Enter your Merchant ID exactly as it appears in your Apple Developer account, including merchant..
3. Under Payment Processing Certificate, upload the certificate and its private key. This pair is required.
4. For your website only: under Merchant Identity Certificate, upload the certificate and its private key. Skip this for an iOS app.
5. Select Save changes.

When the setup is complete, the Apple Pay status shows Using your certificates and your Merchant ID. Until the Merchant ID and the Payment Processing pair are saved, Kashier's setup stays in use.

• Each file can be at most 64 KB.
• Private keys must not be password-protected.
• Each certificate is uploaded together with its own private key, and the key must match the certificate.
• Certificates must not be expired and must belong to the Merchant ID you entered.
• To change the Merchant ID, upload a new Payment Processing pair created for the new Merchant ID at the same time.

Accept Apple Pay in your iOS app

To accept Apple Pay inside your own iOS app, you need your Merchant ID and your Payment Processing Certificate and private key. The Merchant Identity Certificate and domain verification are for websites only, so skip them.

1. Create your Merchant ID and Payment Processing Certificate in your Apple Developer account.
2. Upload them to Kashier and check that the status shows Using your certificates.
3. In Xcode, add the Apple Pay capability to your app target and select the same Merchant ID.
4. Pass the same Merchant ID to the Kashier SDK you use:
   • iOS SDK: KashierConfig(appleMerchantID:). See iOS SDK > Apple Pay.
   • Flutter SDK: KashierSDK.initialize(appleMerchantId:). See the Flutter SDK Apple Pay integration guide.
   • Your own PassKit integration: send the Apple Pay token unmodified as paymentMethod.card.applePay = { token } in the checkout pay request.

The Merchant ID in your app, in the SDK and in the Kashier dashboard must be the same. Kashier then decrypts the payments from your app with your Payment Processing private key.

Accept Apple Pay on your website with your own certificates

1. Create your Merchant ID, Payment Processing Certificate and Merchant Identity Certificate in your Apple Developer account.
2. Verify your website domain in your Apple Developer account, under the same Merchant ID (Merchant Domains > Add Domain). Use the domain-association file Apple gives you in your own account, not the file Kashier sends for the standard setup, and host it at https://your-domain.com/.well-known/apple-developer-merchantid-domain-association. No action is needed from Kashier.
3. Upload both certificate pairs to Kashier.
4. Add the SDK to your checkout page as described in Website implementation.

Website implementation

The code below is the same whether your website uses Kashier's certificates or your own.

Basic integration

Add the following code to your checkout page:

<!-- Apple Pay Button Container -->
<div id="kashier-sdk-id"></div>

<!-- Optional Success Response Container -->
<div id="kashier-success-id"></div>

<!-- Optional Failure Response Container -->
<div id="kashier-failure-id"></div>

<!-- Kashier SDK Script -->
<script src="https://payments.kashier.io/kashier-sdk.js"></script>

<!-- Initialization Script -->
<script>
  kashierSDK.load({
      data: {
          mode: 'test', // Use 'live' for production
          sessionId: "YOUR_SESSION_ID"
      },
      onSuccess: (response) => console.log(response),
      onFailure: (error) => console.log(error),
      locale: 'en',
  });
</script>

HTML elements

Configuration options

The kashierSDK.load() method accepts a configuration object with the following properties:

Required parameters

Optional parameters

Managing your certificates

In Settings > Device Payment Configuration > Apple Pay you can:

• View your saved Merchant ID and the date your certificates became active.
• Replace a certificate or private key: select Replace on the file, upload the new one, and save.
• Remove the Merchant Identity Certificate: Apple Pay on your website stops using your own identity. Payments in your iOS app are not affected.
• Switch back to Kashier's setup: turn off Use my own certificates and save. Your uploaded files are kept, so you can turn it on again later.

When you switch back to Kashier's setup:

• Apple Pay in your iOS app stops working until you turn your own certificates on again.
• If your website used your own certificates, it needs the standard setup again: your domain registered with Kashier, and the domain-association file Kashier sends you. Because a domain can belong to only one Apple developer account, remove the domain from your own Apple account first.

Renewing your certificates

Apple certificates expire, so renew them before the expiry date. Kashier holds one active Payment Processing pair at a time:

1. Create the new certificate in your Apple Developer account, but do not activate it yet.
2. Upload the new certificate and private key to Kashier in Settings > Device Payment Configuration > Apple Pay.
3. Activate the new certificate in your Apple Developer account.

Do steps 2 and 3 back to back. Between them, payments encrypted for the certificate Kashier no longer holds fail. For the Merchant Identity Certificate, upload the new pair to Kashier before the old certificate expires.

Troubleshooting

Support

For technical support, contact Kashier support at:

• Email: [email protected]