Payment

Mount the payment routes and initialise the chosen provider.

The active payment processor. Fill in the matching credentials block below.

Route prefix for all payment endpoints.

Fallback currency (e.g. TRY, USD, EUR) and locale (e.g. tr, en) when a request omits them. Default to "TRY" and "tr" respectively when the config omits them.

Where the browser is sent after a successful, failed or errored payment respectively. Default to the literal paths "/payment/success", "/payment/failed" and "/payment/error" — these are hardcoded literals, NOT derived from basePath, so customising basePath does not recompute them.

URL the provider posts asynchronous results back to. Auto-generated from basePath if omitted.

Let users store cards for faster repeat checkout (provider-tokenised; no PAN touches your DB). On by default — set false to disable.

Enable the 3-D Secure challenge flow. On by default — shifts liability and satisfies SCA requirements; set false to disable.

Enable marketplace sub-merchants so a payment can be split and commission retained. Off by default — opt in to unlock marketplace splitting.

iyzico provider credentials.

Stripe provider configuration.

iyzico and stripe each implement the same PaymentProvider contract (createIyzicoProvider / createStripeProvider). Your code and the generated routes call the interface; swapping providers is a config change, not a code change.

Every credential (apiKey, secretKey, webhookSecret, apiUrl) is run through resolveEnvValue — if the string matches an environment variable it uses that, otherwise the literal. So the same config travels across environments with secrets in env vars.

If payment.enabled is false the service simply returns null (no warning — the guard runs before the logger is even created). If payment is enabled but the provider block is missing or required credentials don't resolve, it logs a warning and returns null. Either way the app still boots, just without payment routes, instead of crashing.

The Stripe webhook secret is threaded into the service so the webhook route can verify event signatures before trusting them; a missing secret is warned about loudly because it disables that verification.

Turns on the marketplace money layer (ledger, splits, reserves, payouts, disputes).

Days a completed sale's net payable is held before it settles to the seller's available balance.

Longer settlement delay applied to new/unseasoned sellers instead of the default delay.

Fraction of each sale's after-fee amount held back as a risk reserve (clamped to 0–1). 0 = no reserve.

Days a held reserve waits before it is eligible for release back to the seller.

Smallest balance that may be requested as a payout (in minor units, e.g. cents — 500 = 5.00; marketplace ledger/split amounts are all integer minor units).

Currency for marketplace ledger/splits when not otherwise specified; falls back to payment.defaultCurrency, then USD.

When true, reserves past their reserveReleaseDays are released automatically; otherwise release is manual/operator-driven.