OptionalbaseExplicit, never inferred. sandbox -> payment.preprod.direct.worldline-solutions.com, live -> payment.direct.worldline-solutions.com.
OptionalfetchInjected for tests.
Optionalinit: RequestInitOptionalinit: RequestInitOptionalmaxAutomatic retries for transport-level trouble only (network failure, timeout, HTTP 5xx, 429) with exponential backoff. Default 2. Safe because the idempotence key makes money-moving calls idempotent and a tokenization create is amountless. Business errors (declines, validation) are NEVER retried here.
Merchant id (PSPID) — the {merchantId} path segment on every endpoint.
OptionalnowInjected clock (ms since epoch). Also drives the request Date header —
Worldline rejects timestamps older than five minutes, so keep it accurate.
OptionalpaymentAccount capabilities vary by contract — override instead of trusting defaults.
OptionalrequestAbort a hung Worldline connection after this many milliseconds (default 30000). The timer covers the whole exchange including the response body read. Money-moving calls carry a signed idempotence key, so a timed-out request is safe to retry (a replayed tokenization create merely re-issues an amountless session). Timeouts surface as retryable psp_unavailable.
v1HMAC secret API key (server-side only).
HMAC key for the stateless signed session context (see session-context.ts).
OptionalsessionHow long a signed session context stays completable, in seconds. Default 3600 (1h). A signed token must not be valid forever — expiry is enforced at completePayment.
OptionalsleepInjected backoff sleep for retry tests; defaults to real setTimeout.
Worldline webhook signing keys. Each webhook carries an X-GCS-KeyId
naming which key signed it; pass several to rotate with no cutover (any
active key verifying wins).
v1HMAC API key id (the identifier half — not a secret).