Download the PHP package nexorams/sdk without Composer
On this page you can find all versions of the php package nexorams/sdk. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Package sdk
Short Description Official PHP SDK for the Nexora Developer Platform
License MIT
Homepage https://nexoragms.com/developers
Informations about the package sdk
Nexora PHP SDK
Official PHP client for the Nexora Developer Platform.
Programmatically provision, automate, and orchestrate multi-tenant sector management systems (Schools, Hospitals, Hotels, Pharmacies, Enterprises) with the Nexora Developer API (/developer/v1).
Requirements
- PHP:
>= 8.1(tested on PHP 8.1, 8.2, 8.3, and 8.4) - Extensions:
ext-json,ext-curl,ext-mbstring,ext-openssl - Composer:
>= 2.0
Installation
Install the official package via Composer:
Authentication
All requests to the Nexora Developer API are authenticated using your Developer API Key transmitted via HTTP Bearer token:
TEST vs LIVE Environments
Nexora uses distinct key prefixes to guarantee environment isolation:
- Sandbox / Test:
nx_test_...— Provisions isolated sandbox organizations with automatic 30-day trials. - Production / Live:
nx_live_...— Provisions real-world tenant organizations. Webhook endpoints require valid HTTPS destinations passing SSRF security validation.
Environment authority is determined server-side from your API key.
CRITICAL SECURITY NOTICE:
Nexora Developer API keys are server-side credentials. NEVER expose your API key in Blade templates, frontend JavaScript, mobile app bundles, public HTML, or client-accessible environment files.
Quick Start
Resource Usage Guide
Organizations
Programmatic provisioning, lifecycle management, and metadata updates for tenant management systems.
Users
Provision practitioners, teachers, staff members, and client users into tenant organizations.
Note: The Developer API enforces role safety. Attempting to assign platform administration roles (
SUPER_ADMIN,PLATFORM_SUPPORT) will result in aPermissionException(FORBIDDEN_ROLE).
Modules
Query available modular capabilities and inspect developer account module credit entitlements.
Plans
Inspect public subscription tiers, sector limits, and pricing.
Subscriptions
Inspect authoritative tenant subscription tiers, trial periods, and resource quotas.
Domains
Connect and verify custom white-label hostnames.
Webhooks
Register real-time event listener endpoints and rotate cryptographic signing secrets.
Webhook Signature Verification
Incoming webhook POST requests are signed using HMAC-SHA256 (t=<timestamp>,v1=<signature>). Verify the signature using constant-time comparison (hash_equals) and automatic replay protection:
Deliveries
Audit real-time delivery logs, HTTP response codes, and trigger redeliveries.
Usage & Observability
Monitor monthly request volume, error distributions, and project quota status.
Nexora Cloud (custom management systems)
Organizations install Nexora Cloud applications and explicitly grant your developer project access to specific
entities and actions. Your API key needs cloud:read, cloud:write and/or cloud:delete; the effective
permissions are the intersection of the organization's grants and your key's scopes.
Sensitive fields are never returned or writable through the API. TEST keys can use your own application's sandbox.
Error Handling
The SDK provides a clean exception hierarchy mapping directly to server response codes. All exceptions expose correlation requestId, statusCode, and errorCode:
Idempotency
Mutating write operations like organization provisioning support the Idempotency-Key header:
Framework Integration Examples
Laravel Integration
Install the package via Composer:
Add your credentials in .env:
Register the configuration in config/services.php:
Bind the client in app/Providers/AppServiceProvider.php:
Use in a Controller:
Webhook Controller with CSRF exemption:
Security & Compliance
- Secret Masking: The
Nexoraclient implements custom__debugInfo()and__serialize()methods to ensure API keys are never exposed in logs, crash dumps, or error reports. - Timing Attack Protection: Webhook verification always uses
hash_equals(). - Replay Attack Protection: Webhook signatures include a timestamp (
t=<timestamp>) validated against a configurable tolerance window.
Support & Resources
License
The Nexora PHP SDK is open-sourced software licensed under the MIT license.