Xendit

Technical details

APIs:

This module integrates Xendit with different payment flows depending on the payment method:

For Card payments, it renders a self-hosted payment form with regular (non-iframe) inputs and relies on the Xendit.js SDK to create a (single-use or multiple-use) token that is used to make the payment. When the payment is successful, and the user opts to save the payment method, the token is saved in Odoo. Other communications with Xendit are performed via server-to-server API calls.

The JS assets are loaded in JavaScript when the payment form is submitted.

As payment details are retrieved in clear but are immediately passed to the Xendit.js SDK, the solution qualifies for SAQ A-EP.
For other payment methods, this module uses the generic payment with redirection flow based on form submission provided by the payment module.

This implementation allows supporting tokenization for Card payments whilst retaining support for other payment methods via the redirection flow.