Malaysia Payment Gateway

Idempotente, HMAC-verificerede checkout/webhook-flows for CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

Af afu-it · afu-it/malaysia-payment-gateway

Testet · Virker ★ 9.6/10

Malaysia Payment Gateway — Idempotente, HMAC-verificerede checkout/webhook-flows for CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

Hvad det gør

Guider implementering af Malaysia-specifikke betalingsgateway-integrationer (CHIP Collect, Curlec/Razorpay, Xendit Malaysia, Bayarcash, BCL Pay, toyyibPay, Billplz, FPX, DuitNow QR) som en local-payment-intent-first state machine. Udløses ved checkout, webhook/callback-verifikation, HMAC-signaturkontrol, idempotent afregning, refusioner, afstemning og sandbox/live-udbyderskift.

Testrapport

Dens security-settlement.md leverer en 9-spørgsmåls 'loophole review' (kan en duplikeret webhook dobbelt-opfylde? kan beløb/valuta forfalskes?), som et baseline skemadesign overser fuldstændigt, plus en dedikeret gateway_event dedupe-tabel, som baseline-løsninger springer over.

Testet: 2026-07-14 · Claude Code 2.x (agent harness)

Installation

git clone https://github.com/afu-it/malaysia-payment-gateway
cd malaysia-payment-gateway
mkdir -p ~/.claude/skills
cp -r malaysia-payment-gateway ~/.claude/skills/malaysia-payment-gateway

Kommandoer og eksempelprompter

/malaysia-payment-gatewayIdempotente, HMAC-verificerede checkout/webhook-flows for CHIP, Curlec, Xendit MY, Billplz, toyyibPay.

Skills udløses af almindelige forespørgsler — ingen kommandoer at huske. Efter installationen aktiverer prompter som disse skillen (på engelsk):

Help me integrate Billplz checkout with proper webhook signature verification
I need idempotent settlement handling for our Curlec payment webhooks
Set up FPX and DuitNow QR payments with HMAC-verified callbacks

Læs hele rapporten →