Malaysia Payment Gateway

Idempotentní, HMAC-ově ověřené checkout/webhook toky pro CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

od afu-it · afu-it/malaysia-payment-gateway

Otestováno · Funguje ★ 9.6/10

Malaysia Payment Gateway — Idempotentní, HMAC-ově ověřené checkout/webhook toky pro CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

Co umí

Vede implementaci Malaysia-specific payment gateway integrations (CHIP Collect, Curlec/Razorpay, Xendit Malaysia, Bayarcash, BCL Pay, toyyibPay, Billplz, FPX, DuitNow QR) as a local-payment-intent-first state machine. Spouští se na checkout, webhook/callback verification, HMAC signature checks, idempotent settlement, refunds, reconciliation, and sandbox/live provider switching.

Testovací report

Its security-settlement.md ships a 9-question 'loophole review' (can a duplicate webhook double-fulfill? can amount/currency be forged?) that a baseline schema design misses entirely, plus a dedicated gateway_event dedupe table baseline solutions skip.

Testováno: 2026-07-14 · Claude Code 2.x (agent harness)

Instalace

git clone https://github.com/afu-it/malaysia-payment-gateway
cd malaysia-payment-gateway
mkdir -p ~/.claude/skills
cp -r malaysia-payment-gateway ~/.claude/skills/malaysia-payment-gateway

Příkazy a ukázkové prompty

  • /malaysia-payment-gatewayIdempotentní, HMAC-ově ověřené checkout/webhook toky pro CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

Skilly se spouštějí běžnými požadavky — žádné příkazy k zapamatování. Po instalaci ho aktivují prompty jako tyto (anglicky):

  • Help me integrate Billplz checkout with proper webhook signature verification
  • I need idempotent settlement handling for our Curlec payment webhooks
  • Set up FPX and DuitNow QR payments with HMAC-verified callbacks