README

Laravel package for integrating with the Satim payment gateway (official Algerian interbank payment system).

Features

• Register payments (generate payment links)
• Confirm payment status
• Process refunds
• Auto-convert amounts (DA to cents)
• Auto-generate order numbers
• Comprehensive test coverage
• Fluent/chainable API
• Interface-based design

Requirements

• PHP 8.1+
• Laravel 10.x, 11.x, or 12.x

Installation

composer require ideacrafters/satim-laravel

Configuration

Publish the configuration file:

php artisan vendor:publish --tag=satim-config

Add your Satim credentials to .env:

SATIM_USERNAME=your_username
SATIM_PASSWORD=your_password
SATIM_TERMINAL_ID=your_terminal_id
SATIM_LANGUAGE=fr
SATIM_CURRENCY=012
SATIM_API_URL=https://test2.satim.dz/payment/rest

Configuration Options

Environment URLs:

• Test: https://test2.satim.dz/payment/rest
• Production: https://satim.dz/payment/rest

Quick Start

Understanding the Payment Flow

1. Register Payment → Receive formUrl and mdOrder
2. Redirect User → User pays on Satim's secure page
3. Callback → Satim redirects back to your site
4. Confirm Status → Verify the payment was successful

Key Concepts:

• mdOrder: Unique payment identifier from Satim (you'll need this to confirm payment)
• returnUrl: Where Satim redirects after successful payment
• failUrl: Where Satim redirects if payment fails or is cancelled
• Amounts: Always in Algerian Dinars (DA) - automatically converted to cents

Step 1: Register Payment

use Ideacrafters\SatimLaravel\Facades\Satim;
use Ideacrafters\SatimLaravel\Exceptions\SatimException;

class PaymentController extends Controller
{
    public function create(Request $request)
    {
        try {
            $payment = Satim::amount(100.00) // Amount in DA
                ->returnUrl(route('payment.success'))
                ->failUrl(route('payment.failed'))
                ->description('Order #123')
                ->register();

            // Redirect user to Satim payment page
            return redirect($payment->formUrl);

        } catch (SatimException $e) {
            return back()->withErrors(['error' => 'Payment initialization failed']);
        }
    }
}

Step 2: Handle Success Callback

public function success(Request $request)
{
    $mdOrder = $request->input('mdOrder');

    try {
        $confirmation = Satim::confirm($mdOrder);

        if ($confirmation->isPaid()) {
            // Payment successful! Process the order here
            // Access payment details: $confirmation->amount, $confirmation->pan, etc.

            return view('payment.success', [
                'amount' => $confirmation->amount / 100, // Convert back to DA
                'reference' => $confirmation->orderNumber,
            ]);
        }

        return redirect()->route('payment.failed');

    } catch (SatimException $e) {
        return redirect()->route('payment.failed');
    }
}

Step 3: Handle Failed Callback

public function failed(Request $request)
{
    // Payment was declined, cancelled, or failed
    return view('payment.failed');
}

Refund Payment

Process full or partial refunds for completed payments:

public function refund(Request $request)
{
    try {
        $refund = Satim::refund(
            orderId: $request->order_id,     // mdOrder from Satim
            amount: $request->amount         // Amount in DA (auto-converted to cents)
        );

        if ($refund->isSuccessful()) {
            return back()->with('success', 'Refund processed');
        }

        return back()->withErrors(['error' => $refund->errorMessage]);

    } catch (SatimException $e) {
        return back()->withErrors(['error' => 'Refund failed']);
    }
}

Payment Status Reference

Payment status codes returned by confirm():

Response Objects

RegisterOrderResponse

$payment = Satim::amount(100)->returnUrl(...)->register();

$payment->orderId;      // Satim order ID (mdOrder) - store this!
$payment->formUrl;      // Redirect user to this URL
$payment->isSuccessful(); // Check if registration succeeded

ConfirmOrderResponse

$confirmation = Satim::confirm($mdOrder);

$confirmation->isPaid();       // Payment completed (status 2)
$confirmation->orderStatus;    // Status code (0-6)
$confirmation->amount;         // Amount in cents
$confirmation->pan;            // Masked card number
$confirmation->orderNumber;    // Order reference
$confirmation->approvalCode;   // Bank approval code

RefundOrderResponse

$refund = Satim::refund($orderId, $amount);

$refund->isSuccessful();  // Refund succeeded
$refund->errorMessage;    // Error description if failed

Error Handling

The package throws three types of exceptions:

use Ideacrafters\SatimLaravel\Exceptions\SatimAuthenticationException;
use Ideacrafters\SatimLaravel\Exceptions\SatimPaymentException;
use Ideacrafters\SatimLaravel\Exceptions\SatimException;

try {
    $payment = Satim::amount(100)->returnUrl(...)->register();

} catch (SatimAuthenticationException $e) {
    // Error code 5 - Invalid credentials

} catch (SatimPaymentException $e) {
    // Error codes 1, 2, 3, 4, 6, 14 - Payment issues

} catch (SatimException $e) {
    // Error code 7 or unknown - System errors
}

Common Error Codes

Advanced Usage

Using Dependency Injection

use Ideacrafters\SatimLaravel\Contracts\SatimInterface;

class PaymentController extends Controller
{
    public function __construct(private SatimInterface $satim) {}

    public function create()
    {
        $payment = $this->satim->amount(100)->returnUrl(...)->register();
        return redirect($payment->formUrl);
    }
}

Custom Order Numbers

$payment = Satim::amount(100)
    ->orderNumber('INV' . time()) // Max 10 characters
    ->returnUrl(route('payment.success'))
    ->register();

User-Defined Fields (UDF)

Pass custom data through the payment:

$payment = Satim::amount(100)
    ->udf1('customer_123')    // Max 20 chars each
    ->udf2('campaign_summer')
    ->udf3('referral_code')
    ->returnUrl(route('payment.success'))
    ->register();

Language Override

// Change language per request (default: 'fr')
$payment = Satim::amount(100)
    ->language('en') // 'fr', 'en', or 'ar'
    ->returnUrl(route('payment.success'))
    ->register();

// Or during confirmation
$confirmation = Satim::confirm($mdOrder, 'en');

Partial Refunds

// Refund partial amount
Satim::refund($orderId, 50.00); // Refund 50 DA only

// Full refund
$confirmation = Satim::confirm($mdOrder);
$fullAmount = $confirmation->amount / 100;
Satim::refund($orderId, $fullAmount);

Best Practices

• Always verify with confirm(): Don't trust the redirect alone, always confirm payment status
• Store mdOrder: Save it with your order so you can verify or refund later
• Use HTTPS: All callback URLs must be HTTPS in production
• Handle exceptions: Catch specific exception types for better error handling
• Validate amounts: Minimum 50 DA, use whole numbers
• Test first: Use test environment before going to production

Troubleshooting

"Error code 5: Authentication failed"

Check your credentials in .env:

SATIM_USERNAME=your_correct_username
SATIM_PASSWORD=your_correct_password

"Amount must be multiple of 100"

Use whole DA amounts (integers or floats like 100, 250.00):

Satim::amount(100);    // ✓ Good
Satim::amount(100.50); // ✗ Bad - not a whole DA amount

"Invalid return URL"

Ensure URLs are fully qualified and use HTTPS:

->returnUrl(route('payment.success')) // ✓ Good
->returnUrl('/payment/success')       // ✗ Bad - relative URL

Callback not received

• Check firewall allows incoming requests
• Verify URLs are publicly accessible
• Use https:// (not http://) in production
• For local testing, use ngrok or similar tunneling service

SSL verification issues (local only)

# ONLY for local development with self-signed certificates
SATIM_HTTP_VERIFY_SSL=false

⚠️ Never disable SSL verification in production

Testing

composer test

Changelog

Please see CHANGELOG for more information on what has changed recently.

Security

This package handles sensitive payment information. Please ensure:

• Always use HTTPS in production
• Keep your Satim credentials secure (never commit to version control)
• SSL verification is enabled by default - only disable for local development with self-signed certificates
• Regularly update the package to receive security fixes

If you discover any security-related issues, please email hello@ideacrafters.com instead of using the issue tracker.

License

The MIT License (MIT). Please see License File for more information.