Paymenter x OxaPay Gateway

OxaPay Gateway for Paymenter

Accept cryptocurrency payments in Paymenter through OxaPay — a fast, non-custodial crypto payment processor with support for 40+ coins across multiple networks (BTC, ETH, USDT, LTC, TRX, and more).
This extension adds OxaPay as a fully automated payment gateway to your Paymenter billing panel. Customers are redirected to a hosted OxaPay checkout page, and their invoice is automatically marked as paid the moment the blockchain confirms the transaction — no manual work required.
---
Features

• Fully automated — invoices are marked as paid automatically via secure webhook, no manual confirmation needed
  
• Wide currency support — accept 40+ cryptocurrencies through OxaPay's payment network
  
• Secure by design — every incoming webhook is verified using HMAC-SHA512 signature validation against your Merchant API Key, so only genuine OxaPay callbacks are accepted
  
• Idempotency protection — duplicate webhook deliveries (OxaPay retries up to 5 times) are safely ignored, preventing double-crediting
  
• Two-stage status handling — correctly waits for the final "Paid" confirmation rather than crediting on the initial "Paying" status, avoiding premature invoice completion on unconfirmed transactions
  
• Zero external dependencies — built entirely on Paymenter's native Http facade and Laravel's built-in HMAC functions, no Composer packages required
  
• Minimal configuration — a single field (Merchant API Key) is all that's needed to get started
  

Requirements

• Paymenter (latest version recommended)
  
• PHP 8.3 or higher
  
• An <a href="https://oxapay.com/" target="_blank" rel="noopener noreferrer" class="text-[var(--vp-c-brand-1)] hover:underline">OxaPay</a> account with a Merchant API Key
  

Installation

1. Download the extension and extract it into your Paymenter installation at:

   /extensions/Gateways/oxapay/
   

2. In the Paymenter admin panel, go to Payments → Gateways → Add Gateway and select OxaPay.
3. Clear the Paymenter cache to make sure the extension loads cleanly:

   php artisan optimize:clear
   

Configuration

1. Log in to your OxaPay Merchant Dashboard.
2. Under Merchant Service, create (or copy) your Merchant API Key.
3. In Paymenter, open the OxaPay gateway settings and paste the key into the Merchant API Key field. Save.
4. (Optional, but recommended) In your OxaPay dashboard, under Merchant Service → Advanced/Technical Settings, set the Callback URL to:

   https://your-domain.com/extensions/gateways/oxapay/webhook
   

This isn't strictly required — the extension automatically sends the callback URL with every payment request — but setting it as a dashboard default adds an extra layer of reliability.
5. Enable the gateway and you're ready to accept crypto payments.
That's it — no webhook secrets, no API secrets to juggle separately. The Merchant API Key is used both to authenticate API requests and to verify incoming webhook signatures.
How It Works

1. A customer selects OxaPay at checkout and is redirected to a secure, hosted OxaPay payment page.
2. Once the customer sends payment, OxaPay sends a webhook notification to Paymenter with status Paying (transaction detected, awaiting confirmations).
3. Once the blockchain network confirms the transaction, OxaPay sends a second webhook with status Paid.
4. The extension verifies the webhook's HMAC signature, confirms the invoice hasn't already been credited, and marks the invoice as paid — automatically redirecting the customer's order into your normal fulfillment flow.
Support

For issues specific to this extension, please reach out via [contact method / Discord / support ticket — fill in]. For questions about your OxaPay account, API limits, or supported coins, please refer to the official OxaPay documentation.
Changelog

v1.0.0

• Initial release
  
• OxaPay v1 Merchant API integration (invoice creation + webhook handling)
  
• HMAC-SHA512 webhook signature verification
  
• Idempotent payment processing