Payment Gateway

When This Form Is Used

• When the company starts accepting online payments from customers.
• When merchant credentials change, for example after a key rotation or an account move.
• When moving from test mode to production.
• When one provider needs to be switched off temporarily without deleting its credentials.

Before You Fill It In

• Collect the credentials from the provider merchant dashboard. The field names differ per provider: PayPal uses Client ID and Secret, Stripe uses API Key and Secret, Midtrans uses Server Key and Client Key, Xendit uses a Secret Key, DOKU uses Client ID and Secret Key.
• Xendit has no sandbox switch. Test or production mode is decided by the prefix of the Secret Key itself: xnd_development_ for testing, xnd_production_ for production.
• For Xendit and DOKU, register the notification URL in the provider dashboard first. Without it a successful payment is never recorded as paid, and the order hangs with no error message at all.
• Test with sandbox credentials before switching Active on.

Workflow

1. Open Settings / Business Setup / Payment Gateway.
2. Add a row, then pick the provider in the Payment Gateway field.
3. Fill in its credentials. The fields shown follow the provider you picked, so irrelevant ones stay out of the way.
4. Set Order when more than one provider is active; a lower number appears first.
5. Switch Active on only after the credentials have been tested.
6. Save, then test from a transaction that actually uses online payment.

Fields That Need Attention

After Saving

• An active provider appears immediately as a choice on the online payment screen.
• A provider switched off disappears from the choices, but its credentials stay stored - turning it back on needs no retyping.
• Credentials here never reach the browser apart from keys that are meant to be public, and they appear on no screen other than this form.
• Transactions already running with a previous provider are unaffected; their status is still decided by that provider notification.

Common Problems

• The provider does not appear on the payment screen: check the Active switch, then make sure the credentials are actually filled in.
• Payment succeeds at the provider but the order still hangs: this is almost always a notification URL that has not been registered, or points to the wrong address in the provider dashboard.
• Xendit rejects the transaction: check the Secret Key prefix. A production key in a test environment, or the other way round, is rejected without a clear explanation.
• The provider logo does not show: its icon file is not on the server yet. The provider name still reads correctly, so this does not block use.

Available Fields

The list below summarises the fields available on the form. Credential fields only appear for the provider currently selected, so not all of them are visible at once.

User Checklist

Menu Location

• Settings / Business Setup / Payment Gateway
  /form/paymentgateway