BillKit for Laravel

First-class Laravel integration for BillKit, a Cashier-shaped billing layer on top of the billkit-eu/billkit-php PHP SDK.

• A Billable trait for your User/Team model
• Hosted checkout ($user->checkout(...)) and per-subscription billing portal
• A webhook-synced Subscription Eloquent model + entitlement helpers
• Signature-verified webhook controller wired out of the box

BillKit provisions subscriptions from the inbound Mollie webhook (there is no synchronous "create subscription" call), so the flow is checkout → redirect → your webhook creates the local Subscription, exactly the Cashier model.

Install

composer require billkit-eu/billkit-laravel
php artisan migrate      # creates billkit_subscriptions + adds billkit_customer_id

Publish the config if you want to tweak it:

php artisan vendor:publish --tag=billkit-config

Set your credentials in .env:

BILLKIT_API_KEY=sk_test_...
BILLKIT_WEBHOOK_SECRET=whsec_...

Make a model billable

use BillKit\Laravel\Billable;

class User extends Authenticatable
{
    use Billable;
}

Start a subscription (checkout)

// In a controller. Checkout is Responsable, so you can return it directly:
return $request->user()->checkout('price_pro_monthly', [
    'success_url' => route('billing.done'),
    'cancel_url'  => route('pricing'),
    'trial_days'  => 14,        // optional per-checkout trial override
    'coupon_code' => 'LAUNCH',  // optional
]);

The buyer is redirected to the hosted Mollie checkout. When they finish, BillKit sends subscription.created; the package's webhook controller creates the local Subscription and links it to the billable by customer id.

One-shot payments

For a single, mandate-less charge (Cashier's charge(), a one-time purchase with nothing stored for future reuse), use charge(). Like checkout() it is redirect-based and returns the same Checkout responsable:

// In a controller. Checkout is Responsable, so return it directly:
return $request->user()->charge(1999, 'EUR', 'creditcard', [
    'success_url'        => route('thanks'),
    'cancel_url'         => route('cart'),
    'description'        => 'One premium widget',
    'refund_window_days' => 30,   // 0 disables refunds; default 30; max 365
]);

The buyer completes the payment on the hosted Mollie page. The charge reaches a terminal state via the one_shot_payment.succeeded / one_shot_payment.failed webhooks, so react to them like any other event.

Refund a settled one-shot (within its refund_window_days):

$user->refundOneShot('osp_123');                       // full refund
$user->refundOneShot('osp_123', ['amount_cents' => 500]); // partial

Gate access

if ($user->subscribed()) {
    // active, trialing, past_due, or within a cancel grace period
}

$user->onTrial();
$user->onGracePeriod();

Manage a subscription

$sub = $user->subscription();      // BillKit\Laravel\Subscription

$sub->swap('price_pro_yearly');    // change plan (proration handled server-side)
$sub->previewSwap('price_pro_yearly'); // preview the proration first
$sub->cancel();                    // cancel at period end
$sub->resume();                    // un-pause
$sub->reactivate();                // undo a scheduled cancellation
$sub->pause();

// Mandate re-auth + hosted billing portal both return a redirect URL:
return redirect($sub->updatePaymentMethod(route('billing')));
return $sub->redirectToBillingPortal(route('billing'));

Webhooks

The package registers POST /billkit/webhook (signature-verified) and keeps Subscription rows in sync. Point a BillKit webhook endpoint at that URL and set BILLKIT_WEBHOOK_SECRET. React to any event with the dispatched Laravel events:

use BillKit\Laravel\Events\WebhookReceived;

Event::listen(function (WebhookReceived $event) {
    if ($event->payload['type'] === 'invoice.paid') {
        // ...
    }
});

Logging

Off by default: installing the package does not switch on log output. Name a channel from config/logging.php to opt in:

BILLKIT_LOG_CHANNEL=stack

or in config/billkit.php:

'log_channel' => env('BILLKIT_LOG_CHANNEL'),

The SDK then logs one debug record per HTTP attempt and per response (method, url, attempt, status, duration_ms, request_id) and one warning per retry. The channel's own level still applies, so a channel at info shows the retry warnings and drops the debug lines.

A dedicated channel keeps it out of your main log:

// config/logging.php
'billkit' => [
    'driver' => 'daily',
    'path' => storage_path('logs/billkit.log'),
    'level' => 'debug',
    'days' => 7,
],

Never logged: your API key or the Authorization header; request and response bodies (they carry customer PII); the query string (list filters carry values like email=). Failed calls throw a typed BillKitException rather than being logged, so you never get a duplicate entry. Catch it and log it your own way.

Development

composer install
composer test      # PHPUnit via orchestra/testbench
composer analyse   # PHPStan + larastan
composer cs:check  # php-cs-fixer (@PSR12)

License

Apache-2.0