Verified BursaPay gateway workflow: Explains publishable and secret keys across test and live environments.
1. Overview & Purpose
The gateway defines pk_test, sk_test, pk_live and sk_live key types.
2. Requirements & Setup
Generate only the key types needed for the environment and client/server responsibility.
3. Step-by-Step Workflow
- Open API Keys.
- Generate the required test or live key.
- Use publishable keys where client-side access is intended.
- Use secret keys for server-side API calls.
4. Rules & Troubleshooting
Secret keys must be protected as credentials; live keys should never be exposed in client code.
5. Verification & Next Steps
Store keys in the application's secret-management system.