內容簡介
PureCart 是一款專為 WooCommerce 設計的外掛，提供三種專用產品類型及其完整基礎設施，讓使用者能夠輕鬆銷售數位產品、SaaS 服務和產品組合，並確保安全的下載和授權管理。
【主要功能】
• 安全下載：透過簽名的過期令牌串流檔案
• 軟體授權：加密安全的授權金鑰管理
• SaaS 配置：結帳時的 webhook 帳戶創建
• 客戶儀表板：自我管理授權和下載
• 訂閱計費：定期計費和付款失敗處理
• HPOS 相容：完全支援 WooCommerce 高效能訂單儲存
外掛標籤
開發者團隊
原文外掛簡介
PureCart for WooCommerce adds three purpose-built product types to WooCommerce and the complete infrastructure to sell them:
PureCart Plugin — WordPress plugins, themes, and any downloadable software. Delivers a license key and a signed, expiring download token on purchase.
PureCart SaaS — Hosted software and web applications. Triggers signed webhook provisioning and delivers a unique API key to the customer.
PureCart Bundle — Product bundles. One purchase delivers multiple license keys and download files.
Core Features
Secure Downloads — Every file is streamed through PHP using signed, expiring tokens. No direct file URL is ever exposed. Works for any file format: ZIPs, PDFs, executables, design assets.
Software Licensing — Cryptographically secure license keys with configurable site limits (single, multi, unlimited, lifetime). Full REST API for runtime activation and deactivation by the customer’s application.
SaaS Provisioning — Webhook-based account creation at checkout. API key delivery. HMAC-SHA256 signed payloads. Suspend and reactivate accounts directly from WooCommerce orders.
Customer Dashboard — My Account tabs for licenses, downloads, and API keys. Customers self-manage their purchases without contacting support.
Subscription Billing — Recurring billing via Action Scheduler. Dunning for failed payments.
HPOS Compatible — Full compatibility with WooCommerce High Performance Order Storage.
Plugin Auto-Update Server (Separate Add-On)
A self-hosted update server that lets your customers receive plugin updates through the standard WordPress updater is available as a separate add-on, distributed outside WordPress.org. This keeps the core plugin fully free and unrestricted while giving you the option to add update delivery when your business needs it.
For Developers
REST API under /wp-json/purecart/v1/
PSR-4 namespace: PureCart\
Action Scheduler for all background jobs — no raw WP-Cron
HMAC-SHA256 signed webhooks (X-PureCart-Webhook, X-PureCart-Sig headers)
Requirements
WordPress 6.0 or higher
WooCommerce 9.8 or higher
PHP 8.1 or higher
External Services
PureCart does not send data to any third-party service. Everything runs entirely on your own WordPress installation. The sections below explain what data moves between your site and your customers.
License Activation & Deactivation API
When a customer activates or deactivates a license key on a domain, their WordPress site calls:
Endpoint: https://yoursite.com/wp-json/purecart/v1/license/activate and /deactivate
Data received: license key, domain name, environment type (production / staging / local), and the connecting IP address.
Data stored: activation record in your own database. Nothing is sent to any third party.
Secure File Downloads (digital files, ZIPs, PDFs, any format)
When a customer downloads a purchased file — whether it is a plugin ZIP, a PDF, an ebook, a design asset, or any other digital product — the file is streamed directly from your server through a signed, expiring token URL. No direct file path is ever exposed, and no external service is involved.
Data logged per download: download token ID, IP address, and timestamp. Stored in your own database only.
SaaS Provisioning Webhook
When you sell a SaaS product, PureCart fires a signed webhook to the URL you configure in PureCart → Settings → SaaS Webhook URL. This is your own endpoint (or a service you control, such as your application’s provisioning API).
Data sent: event name (provision, suspend, or activate), API key, plan name, and WordPress user ID.
Security: every payload is signed with HMAC-SHA256 using the secret you set in Settings (X-PureCart-Sig header).
No data is sent to WordPress.org or any other third party. You control the destination URL entirely.
Ensure that whatever endpoint receives this webhook has its own Privacy Policy covering the data it processes.
