Project description
TranslatedPayment gateway integration is not simply a matter of calling a few API methods. It is a full-fledged engineering task that requires careful attention to security, error handling, operation idempotency, and reliable event delivery. Our web platform serves more than 5000 active users monthly, and as we expand our product offerings, we need a standalone module that can be embedded into any component of the system without technical debt and vulnerabilities. Experience with PCI-DSS requirements and secure coding practices according to OWASP is desirable.
The module must cover the complete transaction lifecycle: initiating payment through the provider API, receiving and cryptographically verifying webhooks using HMAC signatures, switching to status polling mode if webhooks fail to be delivered, processing full and partial refunds, and maintaining an immutable log of every operation for internal compliance and external audits. We expect PSR-4 structure, proper exception handling with retry logic, and unit tests on all critical paths. Documentation should be detailed enough that a mid-level developer can independently maintain and develop the module.
Requirements:
— PHP 7.4+ compatible module with PSR-4 autoloading
— Webhook endpoint with HMAC verification and protection against replay attacks
— Transaction status polling when webhook delivery fails
— Refunds: full and partial through the provider API
— Transaction log with search, filtering, and CSV export
— Unit tests with coverage of at least 80% of critical logic
Result: PSR-4 module, OpenAPI 3.0 specification, step-by-step guide with code examples.
The module must cover the complete transaction lifecycle: initiating payment through the provider API, receiving and cryptographically verifying webhooks using HMAC signatures, switching to status polling mode if webhooks fail to be delivered, processing full and partial refunds, and maintaining an immutable log of every operation for internal compliance and external audits. We expect PSR-4 structure, proper exception handling with retry logic, and unit tests on all critical paths. Documentation should be detailed enough that a mid-level developer can independently maintain and develop the module.
Requirements:
— PHP 7.4+ compatible module with PSR-4 autoloading
— Webhook endpoint with HMAC verification and protection against replay attacks
— Transaction status polling when webhook delivery fails
— Refunds: full and partial through the provider API
— Transaction log with search, filtering, and CSV export
— Unit tests with coverage of at least 80% of critical logic
Result: PSR-4 module, OpenAPI 3.0 specification, step-by-step guide with code examples.
Web programming Cash, Bank transfer
