nordkit/svea
Modern PHP SDK for Svea Checkout, Payment Admin, webhook subscriptions and inbound webhook verification. Fluent API with typed value objects, retries, idempotency, async task polling, and a robust testing fake. Includes first-class Laravel integration.
All three outbound APIs (Checkout, Admin, Subscriptions) use Svea's HMAC-SHA512 digest:
Authorization: SveaCheckoutGateway {merchantId} {base64(sha512(body + sharedSecret))}
SveaConnector computes and attaches this header automatically on every request using merchant_id and shared_secret from config.
webhook_secret is a separate secret used only to verify the Svea-Signature header on inbound webhook pushes — it is not the same as shared_secret.
Svea-Signature: HMAC-SHA256(raw body, webhook_secret)
See Webhooks for the verification API.
How can I help you explore Laravel packages today?