SplatDev.Umbraco.Plugins.Payments.BancoInter 1.3.1

Payments.BancoInter

Banco Inter payment integration for Umbraco — supports Pix (immediate and due charges), Boleto com Pix, Banking (outbound Pix, boleto payments, balance/statement), and webhook handling.

Compatibility

Installation

dotnet add package SplatDev.Umbraco.Plugins.Payments.BancoInter

Quick Start

The plugin auto-registers via BancoInterComposer, which sets up the EF Core DbContext, HttpClient, memory cache, and four scoped services: Auth, Pix, Boleto, and Banking.

Configuration

Add to appsettings.json:

{
  "BancoInter": {
    "ClientId": "your-client-id",
    "ClientSecret": "your-client-secret",
    "CertificatePath": "/path/to/certificate.pfx",
    "CertificatePassword": "certificate-password",
    "Environment": "sandbox"
  },
  "ConnectionStrings": {
    "umbracoDbDSN": "Server=localhost;Database=umbraco;Trusted_Connection=True;"
  }
}

Set Environment: sandbox for testing, production for live transactions.

API Endpoints

Payment Methods

Known Limitations

• API route prefix is bancointersandbox — production routing may use a different prefix
• Banking endpoints expose balance and statement data without granular access control
• Certificate-based authentication is required and managed by the SplatDev.Payments.BancoInter library
• Direct project reference to SplatDev.Payments.BancoInter (not a NuGet package dependency)
• Webhook payload signature verification is handled at the library level

Changelog

1.3.1 — 2026-08-24

Package metadata only: the listing now carries an icon and search tags, and the project and repository links point at the organisation that actually hosts this code. No code changes.

1.3.0 — 2026-08-23

The Umbraco Marketplace listing now carries this plugin's screenshots. The listing keeps its own screenshot list rather than reading the README, and this one was empty — so the entry showed no images at all.

1.2.2 — 2026-08-21

• Pix settlement callbacks work again. The webhook sat behind the backoffice authorization added in 1.2.0, so Banco Inter's server — which has no backoffice session — was answered with 401 and a charge stayed pending even after the payer had paid.
• The webhook is now gated on a shared secret (BancoInter:WebhookSecret) supplied on the callback URL, and refuses everything while that secret is unset rather than defaulting to open. It marks transactions as settled, so an anonymous caller must not be able to reach it.
• Registering the webhook builds the callback URL server-side and appends the secret, so the secret never passes through the browser.
• The dashboard reaches the plugin's operations for the first time — it previously made no requests at all. It reads the balance on demand, creates Pix charges, registers callbacks, and lists the charges and boletos this site has created.
• Sandbox and production are stated at the top of the dashboard, and the create button says "Create a real charge" outside sandbox. The same button either issues a test instrument or moves money.
• Added GetTransactions and GetStatus. Every charge and boleto was already recorded in the plugin's own table with no way to read it back.

1.2.1 — 2026-08-21

• The plugin's tables are created on startup. They were never created before, so anything touching them failed on a fresh install.
• Runs on SQLite as well as SQL Server. It previously assumed SQL Server and failed with "Keyword not supported: 'cache'" on the database Umbraco's installer offers by default.

License

MIT © SplatDev