omnitrade / stripe

1.x-dev 2026-10-03 17:18 UTC

Requires

• php: >=8.2
• ext-bcmath: *
• glitchr/omnitrade: ^1.0@dev
• nyholm/psr7: ^1.8
• omnipay/common: ^3.0
• omnipay/stripe: ^3.2
• php-http/discovery: ^1.14
• psr/http-client: ^1.0
• psr/http-factory: ^1.0
• symfony/http-client: ^6.4|^7.0|^8.0

Requires (Dev)

• phpunit/phpunit: ^11.0

LGPL-3.0-or-later

• Marco Meyer

• payment
• stripe
• omnitrade

Published on Packagist.org on 2026-10-03 22:52 UTC

README

Stripe for glitchr/omnitrade: cards and wallets through Checkout (Stripe's hosted page), what was paid, refunds, the webhook's events, and the catalogue kept in Stripe's Products - on omnipay/stripe, through the application's HTTP client.

omnitrade:
    gateways:
        card:
            factory: stripe
            options:
                api_key: '%env(STRIPE_API_KEY)%'               # sk_live_... / sk_test_...
                webhook_secret: '%env(STRIPE_WEBHOOK_SECRET)%' # whsec_..., for notify()
                adaptive_pricing: false                        # true: the buyer's own currency may be offered
                payment_methods: []                            # ['card', 'sepa_debit']: the methods to insist on

purchase() opens a Checkout session and answers PENDING with the page's URL (returnUrl required; Stripe appends ?session={CHECKOUT_SESSION_ID} to it); fetch() reads the session (paid, open, expired); refund() pays back on the session's charge, with an idempotency key; notify() checks Stripe-Signature and reads the checkout.session.* events. No authorizations.

Catalogue

fetchProducts() lists Stripe's Products (starting_after; a query through the products search, name~"…"), fetchProduct() reads one by its prod_… id; each active Price is a variant (the default price first) with its offer. Metadata are the attributes, metadata.brand the brand; images the media. Stripe counts no stock: fetchInventory() is not supported. notify() reads product.* and price.* into a Notification carrying the product. See docs/catalogue.md.

Credentials: a secret key from the Stripe Dashboard (Developers → API keys), and a webhook endpoint for checkout.session.completed, checkout.session.async_payment_succeeded, checkout.session.expired, checkout.session.async_payment_failed (its signing secret is webhook_secret). Locally, stripe listen --forward-to <your webhook URL> prints one.

License: LGPL-3.0-or-later.