Sylius Xpay Plugin

XPay payment gateway for Sylius 2.1+: cards (with 3-D Secure), Fawry and ValU, through XPay's Hosted Checkout. Built on the Sylius 2 Payment Request architecture (no Payum).

• Hosted Checkout Session per payment, redirect to checkout.xpay.app, return to the shop.
• Signed webhooks (XPay-Signature, HMAC-SHA256, 5-minute replay window) are the source of truth for payment status.
• Asynchronous methods (Fawry): the order is placed with the payment in processing, completed when the reference is paid.
• Refunds from the Sylius admin call POST /refunds (idempotent).
• Cancelled payments expire the open Checkout Session.
• Admin form in English and Arabic, with the webhook URL to paste into XPay.