Hackware Web Services Payment

Felix Freeman 9466ef27d1 Authorization 4 years ago
config 87a5803eb9 Khipu.cl gateway. 4 years ago
database e4261f913c Payment model and /payments/{uuid} view 4 years ago
routes 4653698dd3 /gateways/payment-methods/{schema} returns a list of all available payment methods for an schema, on all gateways. 4 years ago
src 9466ef27d1 Authorization 4 years ago
COPYING c674e5f517 Add licensing information 4 years ago
README.md 343983d908 README: Document all environment variales used 4 years ago
composer.json e4261f913c Payment model and /payments/{uuid} view 4 years ago


Hackware Web Services Payment


Pay through various payment gateways.

Main goals

  • Web API with RESTful JSON responses.
  • Pay through offsite payment gateways.
  • Notify payment to custom HTTP service (such as the wallet API).


  • As consumer I can perform a payment.
  • As consumer I can choose to pay with the Khipu payment gateway.
  • As consumer I can choose to pay with the Flow payment gateway.
  • As system I can receive payment notifications from offsite payment gateways so that a payment is confirmed.
  • As system I can send a notification to a custom HTTP service so that a payment gets processed on that end.


Configuration based

  • gateways:
    • class: full class name (incluiding namespace) for this gateway.
    • test_mode: optional (depends on the gateway), test mode switch.
    • credentials: credential that your class uses, use environment variables for this.
    • payment_methods: payment methods property name for each schema, used to list available payment methods for all available gateways.
    • schemas: an associative array with valid JSON Schemas, each schema represents a form displayed to the final user containing data to send to the payment gateway (or exceptionally required by the processing payment method).

Database based

  • payments: uuid, user_uid, gateway, currency, amount, description, detail, status

Run it



composer require hackware/hawese-payment

Setup notifications

This package will trigger a request to an external service automattically after reception of an Instant Payment Notification (IPN) from a payment gateway, take it as an external IPN which triggers an internal IPN (I think this is actually very handy :P).

To configure it you will need to change the config/payment.php notify_to field. It's configured to work with hackware/hawese-wallet by default, but it will work with any other endpoint if configured properly.

There's nothing cryptic about it. In the params associative array setup your endpoint input fields as keys and payment attributes with the format payment.payment_model_attribute as values (or actually any other string payment. is used as keyword for the associated Payment model instance).

Environment variables

  • KHIPU_RECEIVER_ID credentials.
  • KHIPU_SECRET_KEY credentials.
  • FLOW_API_KEY credentials.
  • FLOW_SECRET_KEY credentials.
  • FLOW_TEST_MODE test mode switch, boolean.
  • PAYMENT_SOURCE_URL is the place where to download the source code of your version of this project. Required.
  • PAYMENT_WALLET_ENDPOINT endpoint to a running hackware/hawese-wallet instance for IPN.
  • PAYMENT_RETURN_URL where to return the payer after a successful or failed payment, an uuid query param will be appended to this URL, so you can call to the payments.verify route from that endpoint. hackware/userland is already prepared for that on the /add-funds/verify endpoint.
  • PAYMENT_CORE_AUTH_TOKEN system token in key:secret format. It's returned by the hackware/hawese composer run-script seed command, which runs the initial hackware/hawese-seeds.


If you want to create a custom gateway please contact me first for guidelines, otherwise your contribution might be rejected (and implementation will be harder to grasp).

Error codes

  • 2001. UnexpectedResponseException: Unexpected HTTP response.
  • 2002. UnexpectedValueException: Unsupported request method.
  • 2999. LogicException: Exclusive to getBodyOrQueryParams, POST & GET parameters in the same request. Write this logic yourself.

Copyright and licensing

Copyright 2019 Hackware SpA.

This project is licensed under the GNU Affero General Public License v3 or any later version.

How to comply with license terms?

To comply with license terms you must provide the means to access the source code of your version of the software easily and free of charge to any person that has access to the software, even users which access through a network (i.e. web browser). I've provided an easy way to accomplish this requirement by setting the PAYMENT_SOURCE_URL environment variable, this will show the link on the index page (/) under the JSON links.payment_sourcecode property.

Any modification or inclusion of this source code will inherit the same license, that is, it can't be sublicensed. But since it's a REST API you can consume it with any other software. That means that this software must always respect users freedom, even if the HTTP API is consumed by a privative one.

Other licensing options

If you want to use the software but are afraid of or can't comply with the license terms we can arrange other license terms for your case. Though most probably I'll not accept if you don't provide your modifications to the software back.