Laravel - Orqex Orchestrate

The SDK ships a Laravel integration. The service provider is auto-discovered, so installing the package is enough.

Configure

ORCHESTRATE_SECRET_KEY=sk_live_...

Publish the config file if you need to change the defaults:

php artisan vendor:publish --tag=orchestrate-config

// config/orchestrate.php
return [
    'secret_key'      => env('ORCHESTRATE_SECRET_KEY'),
    'base_uri'        => env('ORCHESTRATE_BASE_URI', 'https://api.orqex.com/v1'),
    'timeout'         => (float) env('ORCHESTRATE_TIMEOUT', 30),
    'connect_timeout' => (float) env('ORCHESTRATE_CONNECT_TIMEOUT', 10),
    'max_retries'     => (int) env('ORCHESTRATE_MAX_RETRIES', 2),
    'network'         => [
        'resolve_ip' => env('ORCHESTRATE_RESOLVE_IP'),
        'ca_bundle'  => env('ORCHESTRATE_CA_BUNDLE'),
    ],
];

Use it

The client is bound as a singleton, so inject it:

use Orqex\Orchestrate\OrchestrateClient;

final class CheckoutController
{
    public function __construct(private readonly OrchestrateClient $orqex) {}

    public function store(Request $request)
    {
        $checkout = $this->orqex->checkouts()->create([...]);

        return redirect()->away($checkout->url);
    }
}

Or use the facade:

use Orqex\Orchestrate\Laravel\Facades\Orchestrate;

$intent = Orchestrate::paymentIntents()->retrieve($id);

Switching environments

Point ORCHESTRATE_SECRET_KEY at a sk_sandbox_ key in your local and staging environments, and a sk_live_ key in production. Nothing else changes — see Authentication.

Receiving webhooks

Register a route that is exempt from CSRF, verify the signature against the raw body, then hand the work to a queued job so the endpoint answers fast. See Webhooks for the signature check and the event list.

Route::post('/webhooks/orqex', function (Request $request) {
    // verify the signature against $request->getContent(), then:
    ProcessOrqexEvent::dispatch($request->json()->all());

    return response()->noContent();
})->withoutMiddleware(VerifyCsrfToken::class);

Private network routing

When your Laravel application can reach the API through a private network, resolve the public API hostname to the private endpoint from environment configuration:

ORCHESTRATE_RESOLVE_IP=192.0.2.10

The SDK connects to that IP while keeping https://api.orqex.com/v1 as the request URL. The public hostname, HTTP Host header and TLS SNI are preserved. If the endpoint certificate is issued by a private certificate authority, also provide its CA bundle:

ORCHESTRATE_CA_BUNDLE=/path/to/private-ca.pem

The file must be readable by PHP. TLS verification stays enabled; do not replace the API hostname with an IP address or disable certificate verification. Custom hostname resolution requires the PHP cURL extension.

192.0.2.10 is a documentation-only address. Set these values through your deployment secrets or environment configuration and do not commit private addresses or certificates.

​Configure

​Use it

​Switching environments

​Receiving webhooks

​Private network routing

Configure

Use it

Switching environments

Receiving webhooks

Private network routing