omnitrade / stripe

1.x-dev 2026-10-17 13:52 UTC

Requires

• php: >=8.2
• ext-bcmath: *
• nyholm/psr7: ^1.8
• omnipay/common: ^3.0
• omnipay/stripe: ^3.2
• omniscient/omnitrade: ^1.0@dev
• php-http/discovery: ^1.14
• psr/http-client: ^1.0
• psr/http-factory: ^1.0
• symfony/http-client: ^6.4|^7.0|^8.0

Requires (Dev)

• phpunit/phpunit: ^11.0

MIT

• Marco Meyer

• payment
• stripe
• omnitrade

Published on Packagist.org on 2026-10-17 14:09 UTC

README

Stripe for omniscient/omnitrade: cards and wallets through Checkout (Stripe's hosted page), what was paid, refunds, the webhook's events, and the catalogue kept in Stripe's Products - on omnipay/stripe, through the application's HTTP client.

$gateway = (new StripeGatewayFactory($http))->create(['api_key' => '...', 'webhook_secret' => '...']);   // $http: the application's HTTP client; none given, the factory makes its own

No framework needed: the package requires omniscient/omnitrade, symfony/http-client and Omnipay (omnipay/stripe, with what Omnipay itself requires). In a Symfony application, the same through the bundle's configuration:

omnitrade:
    gateways:
        card:
            factory: stripe
            options:
                api_key: '%env(STRIPE_API_KEY)%'               # sk_live_... / sk_test_...
                webhook_secret: '%env(STRIPE_WEBHOOK_SECRET)%' # whsec_..., for notify()
                adaptive_pricing: false                        # true: the buyer's own currency may be offered
                payment_methods: []                            # ['card', 'sepa_debit']: the methods to insist on

purchase() opens a Checkout session and answers PENDING with the page's URL (returnUrl required; Stripe appends ?session={CHECKOUT_SESSION_ID} to it); fetch() reads the session (paid, open, expired); refund() pays back on the session's charge, with an idempotency key; notify() checks Stripe-Signature and reads the checkout.session.* events. No authorizations.

Catalogue

fetchProducts() lists Stripe's Products (starting_after; a query through the products search, name~"…"), fetchProduct() reads one by its prod_… id; each active Price is a variant (the default price first) with its offer. Metadata are the attributes, metadata.brand the brand; images the media. Stripe counts no stock: fetchInventory() is not supported. notify() reads product.* and price.* into a Notification carrying the product. See docs/catalogue.md.

Credentials: a secret key from the Stripe Dashboard (Developers → API keys), and a webhook endpoint for checkout.session.completed, checkout.session.async_payment_succeeded, checkout.session.expired, checkout.session.async_payment_failed (its signing secret is webhook_secret). Locally, stripe listen --forward-to <your webhook URL> prints one.

Responsibility

This package is an independent, unofficial client: it is not affiliated with, endorsed by or sponsored by Stripe, Inc. It reaches their service on behalf of whoever runs it, and it does not redistribute their data beyond the short excerpts recorded as test fixtures. Its MIT licence covers this package's code only and grants no right to the service or to its data.

Whoever installs and runs this package is responsible for complying with Stripe's terms (Stripe Services Agreement), for obtaining whatever they require (an account, a key, a licence or subscription, an attribution or a citation, a rate limit to respect), and for any use made of what it returns. The authors publish it free of charge, make no commercial use of it, and accept no liability for how it is used (see LICENSE).

License: MIT since 2026-10-09; earlier versions remain published under LGPL-3.0-or-later.

Connect and subscriptions

Express accounts for those the platform pays (createAccount(), accountLink(), fetchAccount()), payments sent to them as destination charges (Payment::$destination, ::$applicationFee), subscriptions through Checkout (subscribe(), fetchSubscription(), cancelSubscription(), subscriptionPortal()), and the account.updated and customer.subscription.* events read by notify(). See docs/connect.md.