Authentication

​

API Key Types

​

Obtaining Your API Keys

1. Log in to your Yabetoo Dashboard
2. Navigate to Developers or go directly to app.yabetoo.com/developers
3. Copy your test or live API key

​

Using API Keys

curl -X POST https://pay.sandbox.yabetoopay.com/v1/payment-intents \
  -H "Authorization: Bearer sk_test_XXXXXXXXXXXXXXXXXXXXXXXX" \
  -H "Content-Type: application/json" \
  -d '{"amount": 5000, "currency": "xaf"}'

​

SDK Examples

import Yabetoo from '@yabetoo/sdk-js';

const yabetoo = new Yabetoo('sk_test_XXXXXXXXXXXXXXXXXXXXXXXX');

​

Security Best Practices

​

Store Keys Securely

• Use environment variables to store API keys
• Never commit API keys to version control
• Use a secrets manager in production (AWS Secrets Manager, HashiCorp Vault, etc.)

# .env file (never commit this file)
YABETOO_API_KEY=sk_test_XXXXXXXXXXXXXXXXXXXXXXXX

// Access from environment
const yabetoo = new Yabetoo(process.env.YABETOO_API_KEY);

​

Restrict Key Access

• Only give API keys to team members who need them
• Use different keys for different environments
• Rotate keys periodically

​

Regenerating API Keys

1. Go to Developers in your dashboard
2. Click Regenerate next to the compromised key
3. Update your application with the new key
4. The old key will be immediately invalidated

​

Account ID

const session = await yabetoo.sessions.create({
  total: 5000,
  currency: 'XAF',
  accountId: 'acct_XXXXXXXXXXXXXXXX', // Your account ID
  successUrl: 'https://example.com/success',
  cancelUrl: 'https://example.com/cancel'
});