payment-gateway-integration
Integrate payment gateways like Stripe, PayPal, and Square with backends for payment processing, subscription management, and webhook handling. Use when building e-commerce platforms, implementing billing systems, and handling payments securely.
By aj-geddes · 509 installs
npx skills add aj-geddes/useful-ai-prompts --skill payment-gateway-integration
Source repository · Upstream listing
Payment Gateway Integration
Table of Contents
[Overview]( overview)
[When to Use]( when to use)
[Quick Start]( quick start)
[Reference Guides]( reference guides)
[Best Practices]( best practices)
Overview
Build secure payment processing systems with major payment providers (Stripe, PayPal, Square), handling transactions, subscriptions, webhooks, PCI compliance, and error scenarios across different backend frameworks.
When to Use
Processing customer payments
Implementing subscription billing
Building e commerce platforms
Handling refunds and disputes
Managing recurring charges
Integrating payment webhooks
Quick Start
Minimal working example:
Reference Guides
Detailed implementations in the references/ directory:
Guide Contents
[Stripe Integration with Python/Flask](references/stripe integration with pythonflask.md) Stripe Integration with Python/Flask
[Node.js/Express Stripe Integration](references/nodejsexpress stripe integration.md) Node.js/Express Stripe Integration
[PayPal Integration](references/paypal integration.md) PayPal Integration
[Subscription Management](references/subscription management.md) Subscription Management
Best Practices
✅ DO
Use official payment SDK libraries
Verify webhook signatures
Store minimal payment information
Never store full credit card numbers
Use HTTPS for all payment routes
Implement proper error handling
Test with sandbox environments
Handle payment failures gracefully
Implement PCI compliance
Log all payment transactions
Use idempotency keys
Implement retry logic
❌ DON'T
Handle raw card data
Store sensitive payment information
Log sensitive details
Trust client side validation only
Ignore webhook events
Hardcode API keys
Use test keys in production
Skip SSL/TLS verification
Forget to validate amounts
Store payment tokens without encryption