Skip to main content
Confirm that PayPal is supported by the payment integration included in the deployed release. Use sandbox credentials for development and staging.

Configuration

Keep client secrets and webhook identifiers in protected server-side configuration. Use the correct sandbox/live environment and ensure the registered return, cancel, and webhook URLs match the deployment.

Lifecycle

The backend should create the provider order using server-calculated totals, allow the customer to approve it through the provider flow, and capture/verify payment server-side. Persist provider IDs and final capture details according to the adapter’s data model.

Security and reconciliation

Verify webhook authenticity, correlate every event with the expected local order, validate amount and currency, and process duplicate notifications idempotently. Do not mark an order paid based only on a client redirect or query parameter.

Verify

Read the actual provider service, route registration, environment loader, and tests in the target release before publishing concrete endpoints or variable names.