Test Credentials
info
The real sandbox credentials live in your Lodin Console. The values in this page are placeholders for documentation purposes only — do not copy them into a config file.
Configuration
| Field | Value |
|---|---|
| API endpoint | https://api-preprod.lodinpay.com/merchant-service/extensions/pay/rtp |
| Client ID | Available in Console → Settings → API keys → Sandbox |
| Client Secret | Available in Console → Settings → API keys → Sandbox |
| Test bank | Selectable on the sandbox payment page — labelled "Lodin Test Bank" |
Scripted test scenarios
| Scenario | How to trigger | Expected outcome |
|---|---|---|
| Successful payment | Complete the test bank SCA normally | Webhook payment.succeeded; order → PAID |
| Failed payment | Cancel during SCA | Webhook payment.failed; order → PAYMENT_ERROR; cart restored |
| User abandons session | Close the tab without completing | No webhook arrives; order stays PENDING_PAYMENT until admin cleanup |
| Timeout / expired link | Wait > 15 minutes before authenticating | Webhook payment.failed with errorMessage = "session_expired" |
| Amount mismatch | (Server-side test) tamper with order.amount post-creation | Webhook reconciliation rejects with HTTP 500; order stays PENDING_PAYMENT |
| Duplicate webhook | Replay the last event from the Console | Handler returns 200; order state unchanged (idempotent) |
Local webhook testing
To receive webhooks on your laptop during development, expose your local server with a tunnel:
ngrok http 8080
Use the resulting HTTPS URL as your webhook endpoint in the Console (sandbox profile only). Cloudflare Tunnel and Tailscale Funnel work equally well if you prefer them.
Going live
When you're ready for production:
- Open a go-live ticket in the Console.
- We review your sandbox traffic to confirm webhook handling, signature verification, and idempotency are all in place.
- You receive production credentials and the production endpoint by email.
- Swap credentials in your config — never use sandbox endpoints with production credentials, or vice versa.
- Run a smoke test at minimum amount (
0.01 €) against your real IBAN.