Alfa Bank SDK (Unofficial)

This is an unofficial PHP SDK for the Alfa Bank API, built using Saloon and Spatie Laravel Data.

Requirements

PHP 8.2+
OpenSSL (for certificate generation/handling)
Saloon
Spatie Laravel Data
phpseclib (for Card Encryption)

Installation

composer require apoloz/alfa-bank-sdk

Laravel Integration

The package supports auto-discovery. Publish the config file:

php artisan vendor:publish --tag=alfa-bank-config

Configure your .env:

ALFA_BAAS_CERT_PATH=/path/to/cert.cer
ALFA_BAAS_KEY_PATH=/path/to/key.key
ALFA_BAAS_ENV=sandbox

ALFA_SBP_CERT_PATH=/path/to/cert.cer
ALFA_SBP_KEY_PATH=/path/to/key.key
ALFA_SBP_KEY_ALIAS=your-alias
ALFA_SBP_ENV=sandbox

Now you can inject the connectors:

use Apoloz\AlfaBank\AlfaBankConnector;

public function index(AlfaBankConnector $connector) {
    $connector->withToken('...')->send(new GetNominalAccountsRequest());
}

Core Usage (Generic PHP)

1. Initialize the Connector

use Apoloz\AlfaBank\AlfaBankConnector;
use Apoloz\AlfaBank\Enums\Environment;

$connector = new AlfaBankConnector(
    certificatePath: '/path/to/client.cer',
    privateKeyPath: '/path/to/private.key',
    environment: Environment::SANDBOX
);

2. Authentication

use Apoloz\AlfaBank\Requests\Auth\GetTokenRequest;

$request = new GetTokenRequest(
    clientId: 'your-client-id',
    clientSecret: 'your-client-secret',
    code: 'auth-code',
    redirectUri: 'https://your-app.com/callback'
);

$response = $connector->send($request);
$tokenData = $response->dto();

$connector->withToken($tokenData->access_token);

3. SBP / QR Payouts (C2B)

use Apoloz\AlfaBank\Sbp\SbpConnector;

$sbpConnector = new SbpConnector(
    certificatePath: '/path/to/client.cer',
    privateKeyPath: '/path/to/private.key',
    keyNameAlias: 'your-key-alias',
    environment: Environment::SANDBOX
);

$response = $sbpConnector->send(new GetQrCodeRequest($payload));

4. Utilities

Card PAN Encryption

Required for card payouts in Nominal Accounts.

use Apoloz\AlfaBank\Utils\CardEncryptor;

$encryptedPan = CardEncryptor::encrypt(
    pan: '4779642610000010',
    publicKeyPem: file_get_contents('alfa-card-key.pub')
);

JSON Web Signature (JWS)

Used for signing some BaaS requests.

use Apoloz\AlfaBank\Utils\JwsSigner;

$jws = JwsSigner::sign(
    payload: ['foo' => 'bar'],
    privateKeyPem: file_get_contents('my-key.pem'),
    certificateSerialNumber: '610003...'
);

JSON Web Encryption (JWE)

Used for encrypting sensitive BaaS requests.

use Apoloz\AlfaBank\Utils\JweEncryptor;

$jwe = JweEncryptor::encrypt(
    jws: $jws,
    publicKeyPem: file_get_contents('alfa-cert.cer'),
    certificateSerialNumber: '610003...'
);

Features

Mutual TLS: Automated certificate handling.
Laravel Ready: Service Provider and Config included.
Typed DTOs: Comprehensive response parsing.
Full Product Coverage: BaaS (Nominal Accounts, Escrow), SBP (QR, Subscriptions), Digital Ruble.

License

MIT