Cashfree Decrypts Apple Pay Using Your Own Apple Account

You manage the Apple Pay session and merchant validation using your own Apple credentials. Cashfree provides the Payment Processing Certificate, so it can decrypt the payment token on your behalf. This option supports both app and web checkout.

No PCI DSS compliance is required for decryption. Cashfree handles the decrypted payment data on your behalf.

Prerequisites

Before implementing Apple Pay with this option, ensure you meet the following requirements.

Active Apple Developer Program membership.
Registered Apple Merchant ID.
HTTPS-enabled website or mobile application.
Valid SSL/TLS certificate.
Merchant Identity Certificate (web only), which you set up yourself.
Technical capability to implement the Apple Pay SDK.

Set up certificates with Apple and Cashfree

Complete the following setup process across your Apple Developer account and the Cashfree Merchant Dashboard.

Create Apple Merchant ID

Log in to your Apple Developer account.
Navigate to Certificates, Identifiers & Profiles > Identifiers.
Select + to create a new Merchant ID.
Select Merchant IDs and select Continue.
Enter a unique identifier and description.
Select Register to create your Merchant ID.

Download the CSR from the Cashfree Merchant Dashboard

Log in to the Merchant Dashboard.
Navigate to Settings > Payment Methods > Apple Pay.
Select Custom Checkout > Cashfree Decrypts > I have my own Apple Developer Account.
Select Download CSR. Cashfree generates a unique CSR for your merchant account.

Upload the CSR to Apple and download the signed certificate

In your Apple Developer account, navigate to your Merchant ID settings.
Find Apple Pay Payment Processing Certificate > Create Certificate.
Upload the CSR file downloaded from the Merchant Dashboard.
Download the signed certificate (.cer file) from Apple.

Upload the signed certificate to the Cashfree Merchant Dashboard

Return to the Merchant Dashboard.
Upload the signed .cer file.
Cashfree validates the certificate and activates Apple Pay for your account.

Set up the Merchant Identity Certificate (web only)

In your Merchant ID settings on the Apple Developer portal, find Apple Pay Merchant Identity Certificate.
Select Create Certificate.
Generate a CSR using OpenSSL:

openssl req -new -newkey rsa:2048 -nodes -out merchant_id.csr -keyout merchant_id.key

Upload the CSR to Apple, and download the signed certificate (.cer file).
Install the Merchant Identity Certificate on your server. It is used for two-way TLS with Apple during merchant validation.

In your Merchant ID settings on the Apple Developer portal, navigate to Merchant Domains.
Add your checkout domains where you want to accept Apple Pay as a payment option.
Download the domain verification file from Apple.
Host the file at this exact path on your domain:

https://<YOUR_DOMAIN>/.well-known/apple-developer-merchantid-domain-association

Select Verify in the Apple Developer portal to register the domains with Apple.

Implement Apple Pay on web and iOS

Implement Apple Pay using the following steps, depending on your platform.

Implement Apple Pay in your web application using the following JavaScript steps:

Check Apple Pay availability

// Check if the Apple Pay JS API is available on this device/browser
if (!window.ApplePaySession) {
  // Apple Pay not supported — hide button
  return;
}

// Check device capability
if (!ApplePaySession.canMakePayments()) {
  // Device does not support Apple Pay
  return;
}

// Check if the customer has an active card in Wallet
const merchantIdentifier = 'merchant.com.yourcompany';
const status = await ApplePaySession.applePayCapabilities(merchantIdentifier);
if (status.paymentCredentialStatus === 'paymentCredentialsAvailable') {
  document.getElementById('apple-pay-button').style.display = 'block';
}

Load the Apple Pay button

<!-- Include the Apple Pay JS SDK -->
<script src="https://applepay.cdn-apple.com/jsapi/1.latest/apple-pay-sdk.js"></script>

<!-- Render the Apple Pay button -->
<apple-pay-button buttonstyle="black" type="buy" locale="en-IN"></apple-pay-button>

Create the payment request and initiate the session

const paymentRequest = {
  countryCode: 'IN',
  currencyCode: 'INR',
  supportedNetworks: ['visa', 'masterCard', 'amex'],
  supportedCountries: ['IN'],
  merchantCapabilities: ['supports3DS', 'supportsCredit', 'supportsDebit'],
  total: {
    label: 'Your Store Name',
    amount: '100.00',
    type: 'final'
  }
};
const session = new ApplePaySession(3, paymentRequest);

Handle merchant validation

Your server calls Apple’s merchant session API directly, using your own Merchant Identity Certificate over a two-way TLS connection.

session.onvalidatemerchant = async (event) => {
  // Call your own server to perform merchant validation.
  // Your server uses your Merchant Identity Certificate
  // to make a two-way TLS call to Apple's session API.
  const merchantSession = await fetch('/your-server/validate-merchant', {
    method: 'POST',
    body: JSON.stringify({ validationURL: event.validationURL })
  }).then(r => r.json());
  session.completeMerchantValidation(merchantSession);
};

Handle payment authorisation

After the customer authenticates with Face ID or Touch ID, Apple Pay fires the onpaymentauthorized event with the encrypted payment token. Pass the encrypted token to your server, then call the Cashfree Authorisation Only API with the encrypted data. Cashfree decrypts it and processes authorisation on your behalf.

session.onpaymentauthorized = async (event) => {
  // Forward the encrypted token to your server.
  // Your server forwards it to Cashfree for decryption and processing.
  const result = await fetch('/your-server/process-apple-pay', {
    method: 'POST',
    body: JSON.stringify({
      payment_session_id: '<payment_session_id>',
      encrypted_token: event.payment.token
    })
  }).then(r => r.json());

  if (result.payment_status === 'SUCCESS') {
    session.completePayment(ApplePaySession.STATUS_SUCCESS);
  } else {
    session.completePayment(ApplePaySession.STATUS_FAILURE);
  }
};

session.begin();

Integrate Apple Pay into your iOS application using Swift and the PassKit framework:

Configure the Xcode project

Open your project in Xcode.
Navigate to Signing & Capabilities.
Add the Apple Pay capability.
Select your Merchant ID. This is added as a signed entitlement to your app binary.

Check device compatibility

import PassKit

if PKPaymentAuthorizationViewController.canMakePayments(
  usingNetworks: [.visa, .masterCard, .amex]) {
  // Show Apple Pay button
}

Create the payment request

let request = PKPaymentRequest()
request.merchantIdentifier = "merchant.com.yourcompany.app"
request.supportedNetworks = [.visa, .masterCard, .amex]
request.merchantCapabilities = .capability3DS
request.countryCode = "IN"
request.currencyCode = "INR"
request.paymentSummaryItems = [
  PKPaymentSummaryItem(
    label: "Total",
    amount: NSDecimalNumber(string: "100.00")
  )
]

Handle payment authorisation

After the customer authenticates with Face ID or Touch ID, Apple Pay fires the payment authorization callback with the encrypted payment token. Pass the encrypted token to your server, then call the Cashfree Authorisation Only API with the encrypted data. Cashfree decrypts it and processes authorisation on your behalf.

func paymentAuthorizationController(
  _ controller: PKPaymentAuthorizationController,
  didAuthorizePayment payment: PKPayment,
  handler completion: @escaping (PKPaymentAuthorizationResult) -> Void) {
  // Forward the encrypted token to your server.
  // Your server sends it to Cashfree for decryption and authorisation.
  forwardTokenToCashfree(payment.token) { success in
    completion(PKPaymentAuthorizationResult(
      status: success ? .success : .failure,
      errors: nil
    ))
  }
}

Decryption and authorisation via Cashfree

Pass the encrypted payment object received from Apple Pay to process the payment with Cashfree using the Authorisation Only API. Cashfree decrypts it and processes authorisation on your behalf.

Payments

Payment Gateway

Checkout

International Payments

Flowwise

RiskShield

Subscription

Other Products

Developer updates

Cashfree Decrypts Apple Pay Using Your Own Apple Account

Prerequisites

Set up certificates with Apple and Cashfree

Implement Apple Pay on web and iOS

Decryption and authorisation via Cashfree

​Prerequisites

​Set up certificates with Apple and Cashfree

​Implement Apple Pay on web and iOS

​Decryption and authorisation via Cashfree

Prerequisites

Set up certificates with Apple and Cashfree

Implement Apple Pay on web and iOS

Decryption and authorisation via Cashfree