Magento 2 · Coriunder_Hosted module

A Magento 2 payment module your security team will sign off on.

The Coriunder_Hosted module hands checkout over to the Coriunder hosted payment page and returns the shopper to your store. Credentials are stored with Magento’s encrypted configuration backend, and card data never reaches your Magento instance.

2.4.7–2.4.9
Magento
PHP 8.2–8.5
Supported
Encrypted
Credential storage
What you get

Built for Magento 2, not ported to it

Installed as a standard Composer module, configured entirely from the Magento admin.

Hosted payment page

Shoppers pay on Coriunder’s page over HTTPS and come back to your success page. Your Magento servers never see or store card details.

Encrypted credentials

The personal hash and portal token are stored with Magento’s encrypted configuration backend rather than as plain configuration values.

3-D Secure ready

Strong customer authentication runs on the hosted page. Contact Coriunder to have it enabled on your merchant account.

Configurable status mapping

Map pending, success and failure replies to the Magento order statuses your operations team already works with.

Portal-driven configuration

Supply a portal token and endpoint instead of static credentials to have merchant configuration resolved dynamically. HTTPS is required.

Merchant-supplied logo

Upload a gateway logo into pub/media/coriunder/logo. Leave it empty and no image is rendered — nothing is bundled as a fallback.

How it works

From cart to confirmed order

A standard redirect flow, deployed with the commands your team already runs.

Deploy the module

Run setup:upgrade, deploy static content and flush the cache. No core files are touched.

Shopper selects Coriunder

The method appears on the payment step with your uploaded logo, when configured for the store view.

They pay on the hosted page

Magento hands the signed request to the Coriunder payment page. 3-D Secure runs here when enabled.

The order status is mapped

The reply is verified and the order moves to the pending, success or failure status you configured.

Built for trust

Credentials stay encrypted, logs stay quiet

The module leans on Magento’s own primitives rather than rolling its own: the encrypted configuration backend for secrets, and the standard payment method interface for checkout.

Debug logging is opt-in and routed through Helper\Data::log(), so it is off unless you deliberately turn it on.

See the technical documentation
  • Encrypted at rest. Personal hash and portal token use Magento’s encrypted configuration backend.
  • Signed requests. Payment requests are signed with your personal hash before they leave Magento.
  • HTTPS enforced. The hosted payment page base URL and the portal endpoint must both be HTTPS.
  • No card data stored. Card entry happens entirely on the Coriunder hosted page.
  • Opt-in logging. Debug output is gated behind an explicit Debug Logging setting.
  • Explicit transaction type. Sale and authorization are configured deliberately, not inferred.
Requirements

Check your store in ten seconds

Current install-ready archive: 1.4.2.

RequirementSupported
Magento2.4.7 – 2.4.9
PHP8.2 – 8.5
ModuleCoriunder_Hostedcoriunder/module-hosted
Admin pathStores → Configuration → Sales → Payment Methods → Coriunder (Hosted)
CredentialsMerchant ID and Personal Hash, stored encrypted
TransportHTTPS required for the payment page and the portal endpoint
Installation

Live in four steps

Deploy it the way you deploy every other Magento module.

Install the files

Add the module under app/code/Coriunder/Hosted/, or use the install-ready archive.

Run setup

Execute bin/magento setup:upgrade, then setup:static-content:deploy and cache:flush.

Configure

Open Stores → Configuration → Sales → Payment Methods → Coriunder (Hosted).

Go live

Enter the Merchant ID, base URL and personal hash, map your order statuses, and enable the method.

Questions

Frequently asked

How do I install it?

Deploy the module to app/code/Coriunder/Hosted/ or use the install-ready archive, then run bin/magento setup:upgrade, setup:static-content:deploy and cache:flush.

Where are my credentials stored?

The personal hash and portal token are stored using Magento’s encrypted configuration backend, not as plain configuration values.

Can configuration come from the Coriunder portal?

Yes. Supply a portal token and portal endpoint for dynamic merchant configuration instead of static credentials. The endpoint must be HTTPS.

Sale or authorization?

Both. The Transaction Type setting selects whether funds are captured immediately or reserved for a later capture.

Which logo appears at checkout?

The one you upload into pub/media/coriunder/logo. If it is empty, no image is rendered — no logo ships with the module.

Does it support 3-D Secure?

Yes. Authentication runs on the Coriunder hosted page; contact Coriunder to have it enabled for your merchant account.

Ready to accept payments?

Download the install-ready archive and connect your Magento 2 storefront to Coriunder.