Deployment
Once the integration has been verified end-to-end in the sandbox (see Testing), follow this checklist to go live.
Production CDN
Swap the script source from the test bundle to the production bundle:
<!-- Sandbox -->
<script src='https://test-pay.dnapayments.com/components/google-pay/google-pay-component.js'></script>
<!-- Production -->
<script src='https://pay.dnapayments.com/components/google-pay/google-pay-component.js'></script>
The bundle determines the default environment, so the environment field in init() can be omitted in production. Pass it explicitly only if you need to override.
Go-live checklist
| # | Step | Where |
|---|---|---|
| 1 | Google Pay is enabled on the production terminal in Settings → Online payment methods → Google Pay | portal.dnapayments.com |
| 2 | Backend uses production clientId, clientSecret and terminalId, and requests tokens from https://oauth.dnapayments.com/oauth2/token (instead of the test-oauth URL) | Your backend |
| 3 | <script> tag points at https://pay.dnapayments.com/components/google-pay/google-pay-component.js | Your HTML |
| 4 | Content-Security-Policy allows pay.google.com and pay.dnapayments.com | Your CSP headers |
| 5 | The checkout page is not loaded inside a WebView in any client (mobile app, Electron, etc.) | Manual verification |
| 6 | Smoke-test a small live transaction end-to-end (including a 3-D Secure card, if your portfolio sees them) and reconcile in the portal | Browser + portal |