- How do I install ax7-cmd/sumsub in a Laravel project?
- Run `composer require ax7-cmd/sumsub` in your project directory. The package requires PHP 8.0+ and Laravel 8+ (verify compatibility with your version). Ensure your `.env` includes `SUMSUB_SECRET_KEY` and `SUMSUB_APP_TOKEN` from your Sumsub dashboard.
- What Laravel versions does ax7-cmd/sumsub support?
- The package targets Laravel 8+ but lacks explicit version constraints in its `composer.json`. Test thoroughly with your Laravel version, especially if using features like Laravel Queues or webhooks. Check the GitHub issues for reported compatibility gaps.
- Can I use this package for video verification with Sumsub?
- The current package focuses on core KYC flows (document uploads, applicant status). Video verification requires Sumsub’s newer SDKs or API endpoints. You may need to extend the package or use direct API calls for video-specific features.
- How do I handle Sumsub webhooks in Laravel?
- The package doesn’t include a built-in webhook listener. Manually route `/sumsub/webhook` to a controller, validate HMAC signatures (using `SUMSUB_WEBHOOK_SECRET`), and process events like `verification.completed`. Use Laravel’s `Hashed` or `Signature` middleware for security.
- Does ax7-cmd/sumsub support async verification flows with Laravel Queues?
- The package doesn’t explicitly support queues, but you can wrap its methods in Laravel Jobs. For example, dispatch a `VerifyApplicantJob` that uses the package’s `createApplicant()` method. Handle retries and timeouts in the job’s `handle()` method.
- How do I debug API errors from Sumsub in Laravel?
- Sumsub API errors (e.g., 401 Unauthorized, 429 Rate Limit) may not map cleanly to Laravel exceptions. Use `try-catch` blocks around package methods and log raw responses with `json_encode($response->getContent())`. For rate limits, implement exponential backoff in your retries.
- What’s the difference between SUMSUB_APP_TOKEN and SUMSUB_SECRET_KEY?
- The `SUMSUB_APP_TOKEN` authenticates API requests (like a Bearer token), while `SUMSUB_SECRET_KEY` secures webhook payloads (for HMAC validation). Never expose the secret key in client-side code. Store both in Laravel’s `.env` and restrict access via environment variables.
- Can I use this package for bulk verification requests?
- The package provides examples for single applicants but lacks bulk-specific methods. For batch processing, loop through applicants using the package’s `createApplicant()` method or use Sumsub’s direct API endpoints for bulk operations.
- How do I generate an access token for Sumsub’s SDKs?
- Use the package’s `generateAccessToken()` method with the applicant’s ID. This returns a token for Sumsub’s JavaScript or mobile SDKs. Store the token securely and use it within SDK initialization (e.g., `SumSub.init({ token: 'YOUR_TOKEN' })`).
- Are there alternatives to ax7-cmd/sumsub for Laravel?
- For Sumsub integration, alternatives include direct API calls via Guzzle or Laravel HTTP client, or third-party wrappers like `spatie/laravel-sumsub`. Evaluate based on features (e.g., webhook handling) and maintenance. This package excels for quickstart examples but may require customization for advanced use cases.