omnitrade / stripe

1.x-dev 2026-10-02 01:15 UTC

Requires

• php: >=8.2
• ext-bcmath: *
• glitchr/omnitrade: ^1.0@dev
• nyholm/psr7: ^1.8
• omnipay/common: ^3.0
• omnipay/stripe: ^3.2
• php-http/discovery: ^1.14
• psr/http-client: ^1.0
• psr/http-factory: ^1.0
• symfony/http-client: ^6.4|^7.0|^8.0

Requires (Dev)

• phpunit/phpunit: ^11.0

LGPL-3.0-or-later

• Marco Meyer

• payment
• stripe
• omnitrade

Published on Packagist.org on 2026-10-02 01:58 UTC

README

Stripe for glitchr/omnitrade: cards and wallets through Checkout (Stripe's hosted page), what was paid, refunds, and the webhook's events - on omnipay/stripe, through the application's HTTP client.

omnitrade:
    gateways:
        card:
            factory: stripe
            options:
                api_key: '%env(STRIPE_API_KEY)%'               # sk_live_... / sk_test_...
                webhook_secret: '%env(STRIPE_WEBHOOK_SECRET)%' # whsec_..., for notify()
                adaptive_pricing: false                        # true: the buyer's own currency may be offered
                payment_methods: []                            # ['card', 'sepa_debit']: the methods to insist on

purchase() opens a Checkout session and answers PENDING with the page's URL (returnUrl required; Stripe appends ?session={CHECKOUT_SESSION_ID} to it); fetch() reads the session (paid, open, expired); refund() pays back on the session's charge, with an idempotency key; notify() checks Stripe-Signature and reads the checkout.session.* events. No authorizations.

Credentials: a secret key from the Stripe Dashboard (Developers → API keys), and a webhook endpoint for checkout.session.completed, checkout.session.async_payment_succeeded, checkout.session.expired, checkout.session.async_payment_failed (its signing secret is webhook_secret). Locally, stripe listen --forward-to <your webhook URL> prints one.

License: LGPL-3.0-or-later.