Going live
Work through this list before you take real payments.
Configuration
Section titled “Configuration”- Base URL changed to
https://prod.api.nerasika.com. - Production merchant ID and secret in place, stored as server-side secrets.
- Your account has the transaction types, networks and limits you need. Confirm with Nerasol.
Authentication
Section titled “Authentication”- Tokens are cached and reused for up to 24 hours.
- A
401triggers one token refresh and retry.
Callbacks
Section titled “Callbacks”- Callback URLs use HTTPS and are reachable from the internet.
- Your handler replies
2xxquickly. - Your handler ignores duplicates for transactions already final.
Reliability
Section titled “Reliability”- You store
transactionIdandmerchantReffor every request. - A job checks the status of transactions still
pendingafter a while. - Timeouts and
500s don’t resend payments blindly. See Retrying safely.
Monitoring
Section titled “Monitoring”- You log
transactionIds,merchantRefs and error messages. - You alert on a rise in failed transactions or missed callbacks.

