PHPackages                             infifni/sylius-netopia-plugin - PHPackages - PHPackages  [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register)

1. [Directory](/)
2. /
3. infifni/sylius-netopia-plugin

ActiveSylius-plugin

infifni/sylius-netopia-plugin
=============================

Sylius integration with NETOPIA Payments (netopia-payments.com) - hosted card payments via the v2 API (payment/card/start), JWT-verified IPN, payment status sync.

00PHP

Since Aug 24Pushed todayCompare

[ Source](https://github.com/infifni/sylius-netopia-plugin)[ Packagist](https://packagist.org/packages/infifni/sylius-netopia-plugin)[ RSS](/packages/infifni-sylius-netopia-plugin/feed)WikiDiscussions main Synced today

READMEChangelogDependenciesVersions (1)Used By (0)

Sylius NETOPIA Payments Plugin
==============================

[](#sylius-netopia-payments-plugin)

Integrates [NETOPIA Payments](https://netopia-payments.com) (Romanian card payment processor) into Sylius 2.2+ as a Payum gateway, using the [v2 Payment API](https://doc.netopia-payments.com/docs/payment-sdks/php).

How it works
------------

[](#how-it-works)

- **Hosted payment page** - the start request is sent with `payment.instrument = null`, so the customer types the card data on NETOPIA's secure page (`paymentURL` from the response). The shop never touches card data, so no PCI DSS burden.
- **Return flow** - NETOPIA redirects the customer back to the Payum capture URL; the plugin refreshes the payment status via `operation/status` and Sylius continues to the thank-you page.
- **IPN** - NETOPIA POSTs the final status to a per-payment `payum_notify_do`URL. The `Verification-Token` JWT (RS512) is verified against the NETOPIA public key (issuer, audience = POS signature, payload SHA-512 hash) before the status is trusted. A paid/confirmed IPN completes the Sylius payment, which marks the order as paid - the standard Sylius flow continues (confirmation e-mail, shipment, etc.). **No invoice is emitted** - the plugin does not integrate any invoicing.

Configuration
-------------

[](#configuration)

Environment variables (see `Configuration.php` - every plugin config param defaults to one of these):

```
NETOPIA_POS_SIGNATURE=XXXX-XXXX-XXXX-XXXX-XXXX
NETOPIA_API_KEY=your-api-key
# PEM string, base64-encoded PEM, or absolute path to the .pem/.cer file:
NETOPIA_PUBLIC_KEY=/path/to/netopia-public.cer
NETOPIA_PRIVATE_KEY=            # unused by the v2 card flow, reserved
NETOPIA_LIVE=0                  # 0 = sandbox, 1 = production
```

The same values can be overridden per payment method in Admin → Payment methods → gateway configuration; empty admin fields fall back to the env vars.

Installation (path repository)
------------------------------

[](#installation-path-repository)

```
"repositories": [
    { "type": "path", "url": "../sylius-netopia-plugin" }
]
```

```
composer require infifni/sylius-netopia-plugin:*@dev
```

Register the bundle in `config/bundles.php`:

```
Infifni\SyliusNetopiaPlugin\SyliusNetopiaPlugin::class => ['all' => true],
```

Create the payment method (makes it the **only** enabled one; add `--keep-others` to keep existing methods enabled):

```
php bin/console infifni:netopia:install
```

Notes
-----

[](#notes)

- Payment retries create a new Sylius payment, and the NETOPIA `orderID` is `{orderNumber}-{paymentId}`, so error 56 (duplicated orderID) cannot occur.
- The IPN endpoint answers NETOPIA's expected JSON (`{"errorType":0}`), and replies 400 on any verification failure so NETOPIA retries later.
- Sandbox host: `secure-sandbox.netopia-payments.com`; live: `secure.netopia-payments.com/api` (same URLs as the official SDK).

###  Health Score

20

—

LowBetter than 12% of packages

Maintenance65

Regular maintenance activity

Popularity0

Limited adoption so far

Community6

Small or concentrated contributor base

Maturity11

Early-stage or recently created project

 Bus Factor1

Top contributor holds 100% of commits — single point of failure

How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window.

**Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores.

**Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement.

**Maturity (30%)** — Project age, version count, PHP version support, and release stability.

### Community

Maintainers

![](https://www.gravatar.com/avatar/412a751b21ba6f05c0ef08f1358926dba25e1d2c0606aa4c521f50798d23cd97?d=identicon)[lco91](/maintainers/lco91)

---

Top Contributors

[![laurentiu-cocos](https://avatars.githubusercontent.com/u/60970753?v=4)](https://github.com/laurentiu-cocos "laurentiu-cocos (1 commits)")

### Embed Badge

![Health badge](/badges/infifni-sylius-netopia-plugin/health.svg)

```
[![Health](https://phpackages.com/badges/infifni-sylius-netopia-plugin/health.svg)](https://phpackages.com/packages/infifni-sylius-netopia-plugin)
```

PHPackages © 2026

[Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)