Verified BursaPay workflow: Understand what the gateway records about API requests for support, audit and debugging.
1. Overview & Purpose
ApiLog stores the developer, API key, endpoint, method, IP, user agent, request/response information, duration and reference.
2. Requirements & Setup
Developers should avoid sending secrets in request bodies because logged request data may be retained for audit/debugging.
3. Step-by-Step Workflow
- Inspect the API history area or logs endpoint.
- Filter by endpoint, reference or time window where available.
- Correlate the request with your application logs.
- Use the reference to trace the financial operation.
4. Rules & Troubleshooting
Never send passwords, secret keys or unnecessary sensitive data in metadata or request bodies.
5. Verification & Next Steps
Use API logs together with payment/ledger records for production incident analysis.