Zum Hauptinhalt springen
tsecurity.de LIVE
Echtzeit-Radar & Feeds
Alle RSS Feeds
👥 Community & Social
IT Security NachrichtenICYMI: August 2026 @AWS Security(24.09.2026 um 01:31 Uhr)
IT Security NachrichtenMaintenance Company in Dubai: What to Check Before You Sign(24.09.2026 um 01:33 Uhr)
IT Security DownloadsGitHub Release: ollama/ollama v0.34.4-rc1 (24.09.2026)(24.09.2026 um 01:36 Uhr)
IT Security DownloadsGitHub Release: google-gemini/gemini-cli v0.61.0 (24.09.2026)(24.09.2026 um 01:59 Uhr)
IT Security NachrichtenICYMI: August 2026 @AWS Security(24.09.2026 um 01:31 Uhr)
IT Security NachrichtenMaintenance Company in Dubai: What to Check Before You Sign(24.09.2026 um 01:33 Uhr)
IT Security DownloadsGitHub Release: ollama/ollama v0.34.4-rc1 (24.09.2026)(24.09.2026 um 01:36 Uhr)
IT Security DownloadsGitHub Release: google-gemini/gemini-cli v0.61.0 (24.09.2026)(24.09.2026 um 01:59 Uhr)
Intelligence View
⚡ tsecurity.de Intelligence

Building the CREEM Laravel Package: Accept Global Payments in Minutes

I recently built a full-featured Laravel package for CREEM, the developer-first Merchant of Record platform. Here's why I built it, what it does, and how you can start accepting payments in your Laravel app in under 5 minutes. …

0
↗ Quelle (dev.to)
Reagiere als Erste:r — dein Feedback zählt!

I recently built a full-featured Laravel package for CREEM, the developer-first Merchant of Record platform. Here's why I built it, what it does, and how you can start accepting payments in your Laravel app in under 5 minutes.






Why CREEM?



If you're selling SaaS, digital products, or software licenses, handling global payments is painful. You need to deal with:




  • VAT/GST/sales tax across 190+ countries

  • Payment processor integration

  • Subscription lifecycle management

  • License key distribution

  • Refunds and disputes



CREEM handles all of this as a Merchant of Record at 3.9% + 30 cents with zero monthly fees. They take legal responsibility for tax compliance so you can focus on building your product.



The only thing missing? A proper Laravel package.






What I Built



creem/laravel is a comprehensive Laravel package that wraps the entire CREEM API with Laravel-native patterns:






26 API Methods via Facade






use Creem\Laravel\Facades\Creem;

// Create a checkout in one line
$checkout = Creem::createCheckout('prod_abc123', [
'success_url' => route('checkout.success'),
'customer' => ['email' => $user->email],
]);

return redirect($checkout['checkout_url']);






Every CREEM API endpoint is covered: Products, Checkouts, Subscriptions, Customers, Transactions, Licenses, and Discounts.






Billable Trait (Laravel Cashier-style)



Instead of calling the Facade directly, attach the Billable trait to your User model:




use Creem\Laravel\Traits\Billable;

class User extends Authenticatable
{
use Billable;
}






Now billing methods live directly on your model:




$user->checkout('prod_abc123', ['success_url' => '/thanks']);
$user->creemSubscriptions();
$user->cancelSubscription('sub_xyz', 'scheduled');
$user->billingPortalUrl();









15 Webhook Events



The package auto-registers a webhook endpoint at POST /creem/webhook with HMAC-SHA256 signature verification. Every webhook type maps to a typed Laravel event:




// In your EventServiceProvider
CheckoutCompleted::class => [GrantAccessListener::class],
SubscriptionCanceled::class => [RevokeAccessListener::class],






I also added AccessGranted and AccessRevoked convenience events, inspired by CREEM's TypeScript SDK pattern. These fire automatically on the right webhook combinations, so you don't need to remember which events mean "give access" vs "revoke access":




Event::listen(AccessGranted::class, function ($event) {
// Fires on: checkout.completed, subscription.active, subscription.paid
$user = User::where('email', $event->payload['customer']['email'])->first();
$user->update(['has_access' => true]);
});









Auto Sandbox Detection



Use a test API key (creem_test_*) and the package automatically routes to the sandbox API. Switch to production (creem_*) and it hits the live API. Zero config changes needed.






Full Test Suite



73 tests with 137 assertions covering every API method, webhook signature verification, event dispatching, and edge cases. The CI matrix runs across PHP 8.1-8.4 and Laravel 10, 11, 12.






5-Minute Quick Start



1. Install




composer require creem/laravel
php artisan vendor:publish --tag=creem-config
php artisan vendor:publish --tag=creem-migrations
php artisan migrate






2. Configure




CREEM_API_KEY=creem_test_your_key
CREEM_WEBHOOK_SECRET=whsec_your_secret






3. Add Billable to User




use Creem\Laravel\Traits\Billable;

class User extends Authenticatable
{
use Billable;
}






4. Create a Checkout




Route::post('/buy', function (Request $request) {
$checkout = $request->user()->checkout('prod_your_product', [
'success_url' => url('/thanks'),
]);
return redirect($checkout['checkout_url']);
});






5. Handle Webhooks




// app/Listeners/GrantAccess.php
use Creem\Laravel\Events\AccessGranted;

class GrantAccess
{
public function handle(AccessGranted $event): void
{
$email = $event->payload['customer']['email'] ?? null;
User::where('email', $email)->update(['is_premium' => true]);
}
}






That's it. CREEM handles the payment page, tax calculation, and receipt. Your webhook listener grants access when payment succeeds.






Live Demo



Check it out live: https://creem.h90.space



The demo runs the included Docker app connected to the CREEM sandbox API. It features a live dashboard with webhook event tracking, interactive detail drawers, product listing pulled from the CREEM API, and a complete checkout flow — all with a premium dark glassmorphism UI.



Want to run it yourself? The repo includes everything:




cd examples/demo
cp .env.example .env
# Add your CREEM API key
docker compose up -d --build









Package Highlights
















































Feature Details
API Methods 26 (full CREEM API coverage)
Webhook Events 15 typed Laravel events
Tests 73 tests, 137 assertions
PHP Support 8.1, 8.2, 8.3, 8.4
Laravel Support 10, 11, 12
Code Style Laravel Pint enforced
CI/CD GitHub Actions matrix
Artisan Commands
creem:webhook-secret, creem:sync-products
Error Handling 4 typed exception classes with trace IDs









Built by Hani Amin (Discord: xh90) for the CREEM Scoops Laravel integration bounty.

IR-PLAYBOOK-RCE
HIGH
SOC Incident Playbook: Remote Code Execution (RCE) Defense
1-Click Detection Engineering: Sigma & YARA Rules
SOC Ready
title: Detect Exploitation - Building the CREEM Laravel Package: Accept Global Payments in Minutes
id: bc7761f6-74d1-493f-ad50-0d772eb8aba2
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
  - https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
  category: network_connection
  product: any
detection:
  selection:
      CommandLine|contains:
        - 'exploit'
  condition: selection
falsepositives:
  - Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
  - attack.initial_access
rule CTI_Threat_Indicator {
    meta:
        author = "iShareStuff CTI Automated Detection Engine"
        date = "2026-09-24"
        description = "YARA Signature for "
    strings:
        $str = "Building the CREEM Laravel Pac" ascii wide
    condition:
        any of them
}
Infrastructure Blast Radius & Exposure
LOCALIZED
Perimeter & External Ingress
GEFÄHRDET (85%)
Lateral Movement & Pivot
Geringes Risiko
Data Stores & Crown Jewels
Geringes Risiko
Supply Chain & Cascading Reach
Geringes Risiko
Ähnliche Beiträge
🔍 Verwandte News

Auch interessante Nachrichten Building the CREEM Laravel Package: Accept Global Payments in Minutes

Thematisch verwandte Begriffe: Building, CREEM, Laravel, Package · 6 Treffer

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Laden...

Beiträge werden geladen ...

Laden...

Videos werden geladen ...

Zum Aktualisieren ziehen
ZERO-DAY CVE-2026-96676 | A vulnerability was identified in Fast FAC1900R 20190827_2.0.2. The impa…
Advisory →
TTS Reader • tsecurity.de Voice
tsecurity.de Icon
tsecurity.de App
Offline-Lesen, Eilmeldungen & 0ms Ladezeit

Installiere tsecurity.de direkt auf deinen Home-Bildschirm für das ultimative Vollbild-Magazinerlebnis ohne Browser-Leisten.

Nächster Beitrag
Themen-Radar & Intelligence Matrix
Echtzeit-Taxonomie nach Angriffsvektoren & Plattformen

tsecurity.de Live Threat Radar

🔴 LIVE RADAR
MONITORING
AKTIV
CVE-DATENBANK
LIVE
🔍
Community Radar & Live Chat
Sentinel Bot online • Live-Stream
Dein Cluster: Security Explorer
Match:
lädt…
Verbindung zum Community-Stream wird aufgebaut...
Bearbeitungsmodus — Senden überschreibt deine Nachricht
Community-Puls — was gerade passiert
lädt…
Aktivitäten deiner Analysten
lädt…
Neues Thema oder Eilmeldung einreichen

Reiche interessante Links, Zero-Days oder Debatten ein. Die Community entscheidet per Upvote über die Veröffentlichung.

Heiß diskutierte Einreichungen
🔖 Gespeicherte Artikel
📂 Keine gespeicherten Artikel vorhanden.
Zurück Ziehen Vor
Links: vorheriger Artikel Rechts: nächster Artikel unten: schließen
News NIS-2 Frühwarnung Tier-1 Intel TTP ⏱️ 3 Min vor 10 Min
Artikeldaten werden geladen...

Zurück: vorheriger Vor: nächster
↗ Original-Quelle
Social Reaktionen Deine Reaktion zählt
Einstufung & Relevanz-Poll 0 Stimmen
In sozialen Netzwerken teilen 1-Klick