PolyPay JavaScript SDK 2.0 moves checkout creation to the server.
Browser integrations now open only a Hosted Checkout URL created by a trusted merchant server. Browser Public Key order creation, Session Tokens, order/status APIs, and signed checkout URL builders have been removed.
Create checkout on your server with an API key, return only checkout_url to the browser, and confirm payment through a verified webhook or an authenticated server query. Redirects and popup closes are not payment proof.
Release and migration guide:
https://github.com/PolyPayAi/js-sdk/releases/tag/v2.0.0
https://polypay.ai/en/docs/changelog#2026-09-02-javascript-sdk-2-server-checkout
PolyPay JavaScript SDK 2.0 已将结账创建移至服务端。
浏览器接入现在只打开由可信商户服务端创建的托管结账链接。浏览器 Public Key 创建订单、Session Token、订单/状态接口和签名结账链接构建器均已移除。
请在服务端使用 API Key 创建结账，只把 checkout_url 返回给浏览器，并通过已验证的 Webhook 或服务端鉴权订单查询确认支付。跳转完成或弹窗关闭不能作为支付凭证。
#PolyPay #JavaScript #Payments
Browser integrations now open only a Hosted Checkout URL created by a trusted merchant server. Browser Public Key order creation, Session Tokens, order/status APIs, and signed checkout URL builders have been removed.
Create checkout on your server with an API key, return only checkout_url to the browser, and confirm payment through a verified webhook or an authenticated server query. Redirects and popup closes are not payment proof.
Release and migration guide:
https://github.com/PolyPayAi/js-sdk/releases/tag/v2.0.0
https://polypay.ai/en/docs/changelog#2026-09-02-javascript-sdk-2-server-checkout
PolyPay JavaScript SDK 2.0 已将结账创建移至服务端。
浏览器接入现在只打开由可信商户服务端创建的托管结账链接。浏览器 Public Key 创建订单、Session Token、订单/状态接口和签名结账链接构建器均已移除。
请在服务端使用 API Key 创建结账，只把 checkout_url 返回给浏览器，并通过已验证的 Webhook 或服务端鉴权订单查询确认支付。跳转完成或弹窗关闭不能作为支付凭证。
#PolyPay #JavaScript #Payments