This is a build-to-order Odoo payment provider that ECOSIRE designs, builds, installs and supports for your specific HyperPay account and Odoo version — it is not an off-the-shelf instant download. Your buyers complete payment inside your own Odoo checkout using HyperPay's COPYandPAY embedded widget, so they never bounce to a hosted page and abandon the cart. We extend Odoo's native payment.provider and payment.transaction models with a dedicated HyperPay implementation that speaks HyperPay's REST API: the module prepares a checkout, renders the COPYandPAY brand widget through a QWeb-templated payment form, and on return queries the payment status so every order state in Odoo reflects the real result at HyperPay.

Under the hood we ship a clean, upgrade-safe addon: a proper __manifest__.py declaring dependencies on payment, sale and (where relevant) website_sale; Python models extending models.Model with the entity, access-token and secrets fields; @api.depends computes and constraints where they add safety; access control via ir.model.access.csv plus record rules so only authorized users touch credentials; XML/OWL views and settings screens for configuration; and a signed webhook controller for asynchronous notifications. We wire mada, Visa, Mastercard, Apple Pay and STC Pay through the correct HyperPay entity IDs, enforce 3DS2 / SCA where the card and issuer require it, and reconcile every transaction with both the webhook and an active status-query fallback so a dropped callback never leaves an order stuck.

Because it is a genuine payment.provider extension, the gateway works across Odoo eCommerce (website_sale), the customer portal invoice-payment flow, and Sales Orders — the same journal entries, provider states (draft / pending / authorized / done / cancel / error) and reconciliation you already understand. It runs on Odoo 17, 18 and 19, on Community or Enterprise, and is delivered as versioned source you own. ECOSIRE handles the HyperPay onboarding specifics — entity-per-brand setup, test vs live BASE_URL, IP allow-listing and webhook signing — and hardens it for production before handover.