camerpay/php-sdk

Official PHP SDK for CamerPay - Mobile Money, cards and PayPal payments for Cameroon.

Maintainers

Package info

github.com/camerpay/php-sdk

Homepage

Issues

Documentation

pkg:composer/camerpay/php-sdk

Statistics

Installs: 0

Dependents: 0

Suggesters: 0

Stars: 0

Security

Advisories: 0

Aikido package health analysis

v1.0.0 2026-06-06 06:37 UTC

Requires

Requires (Dev)

MIT 66994f171a610d852a591174004c93c4e66dcb6b

apipaymentsdkpaypalstripeCameroonmobile-moneymtn-momoorange-moneycamerpay

This package is not auto-updated.

Last update: 2026-06-07 04:34:01 UTC

README

License: MIT PHP Version

SDK PHP officiel pour CamerPay — passerelle de paiement Mobile Money, cartes et PayPal au Cameroun.

Installation

composer require camerpay/php-sdk

Requis : PHP 8.1+ avec extensions curl et json.

Démarrage rapide

Initier un paiement

use CamerPay\CamerPay;

$camerpay = new CamerPay($_ENV['CAMERPAY_TOKEN']);

$tx = $camerpay->payments->initiate([
    'amount'                => 5000,
    'currency'              => 'XAF',
    'payment_method'        => 'orange_money',
    'customer_phone'        => '+237690000000',
    'customer_email'        => 'client@exemple.com',
    'merchant_invoice_id'   => 'FACT-001',
    'merchant_callback_url' => 'https://votre-site.com/webhooks/camerpay',
    'merchant_return_url'   => 'https://votre-site.com/merci',
]);

// Rediriger le client vers la page de paiement
header('Location: ' . $tx['pay_url']);

Vérifier le statut

$tx = $camerpay->payments->status('5add2319-f71b-4f2d-a4f4-97fe0d11c1d4');

if ($tx['transaction']['status'] === 'completed') {
    // Marquer la commande comme payée
}

Rembourser

// Remboursement total
$camerpay->payments->refund($uuid);

// Remboursement partiel
$camerpay->payments->refund($uuid, amount: 2500, reason: 'Geste commercial');

Versements groupés (Mass Payout)

$batch = $camerpay->payouts->createBatch([
    'reference'    => 'SALAIRES-2026-06',
    'callback_url' => 'https://votre-site.com/webhooks/payouts',
    'beneficiaries' => [
        ['phone' => '+237690000001', 'amount' => 75000, 'operator' => 'orange_money', 'name' => 'Jean'],
        ['phone' => '+237670000002', 'amount' => 50000, 'operator' => 'mtn_momo',     'name' => 'Aisha'],
    ],
]);

echo "Batch UUID : " . $batch['batch_uuid'];

Vérifier un webhook

use CamerPay\CamerPay;
use CamerPay\Exceptions\WebhookException;

$verifier = CamerPay::webhooks($_ENV['CAMERPAY_WEBHOOK_SECRET']);

try {
    $event = $verifier->verifyFromRequest();

    if ($event['status'] === 'completed') {
        // Marquer la commande comme payée
    }

    http_response_code(200);
    echo 'OK';
} catch (WebhookException $e) {
    http_response_code(401);
    echo 'Invalid signature';
}

Gestion d'erreurs

Toutes les exceptions héritent de CamerPay\Exceptions\CamerPayException :

use CamerPay\Exceptions\AuthenticationException;
use CamerPay\Exceptions\QuotaExceededException;
use CamerPay\Exceptions\ValidationException;
use CamerPay\Exceptions\NotFoundException;
use CamerPay\Exceptions\ServerException;
use CamerPay\Exceptions\CamerPayException;

try {
    $tx = $camerpay->payments->initiate([...]);
} catch (AuthenticationException $e) {
    // 401 — token invalide ou révoqué
} catch (QuotaExceededException $e) {
    // 402 — plafond KYC atteint OU quota plan dépassé
    echo $e->getNextAction();   // "Fournissez votre attestation NIU..."
    echo $e->getUpgradeUrl();   // https://camerpay.biz/client/kyc
    echo $e->getRemainingAmount(); // 5000 XAF restant ce mois
} catch (ValidationException $e) {
    // 422 — données invalides
    print_r($e->getFieldErrors());
} catch (NotFoundException $e) {
    // 404 — UUID inconnu
} catch (ServerException $e) {
    // 5xx — erreur côté CamerPay, retry recommandé
} catch (CamerPayException $e) {
    // Tout le reste
}

Configuration avancée

$camerpay = new CamerPay(
    apiKey:  $_ENV['CAMERPAY_TOKEN'],
    baseUrl: 'https://camerpay.biz/api',  // Override si proxy/staging
    timeout: 30,                          // Secondes
);

Sécurité

  • ✅ Vérification HMAC-SHA256 avec hash_equals() (timing-attack safe)
  • ✅ TLS 1.2+ enforced via CURLOPT_SSL_VERIFYPEER
  • ✅ Pas de dépendances externes (cURL natif, zéro Guzzle)
  • ✅ Tous les secrets via $_ENV recommandé

Ne JAMAIS :

  • ❌ Committer votre token API dans Git
  • ❌ Logger le payload brut (peut contenir des données sensibles)
  • ❌ Exposer votre CAMERPAY_WEBHOOK_SECRET côté frontend

Documentation API

Support

Licence

MIT