Checkout SDK

Going live

Point the widget at the right environment, and pin the script build for a reproducible, tamper-proof integration.

Environments

The environment option maps to a backend base URL. Use development for integration testing and production for live traffic, or pass apiBase to point at any host (it must include /api/v1).

Property	Type	Description
production	https://api.coinfat.com	Live traffic.
development	https://test-api.coinfat.com	Integration testing. The default when environment is omitted.

CDN & versioning

On the script-tag path, @1 tracks the newest 1.x, so fixes reach your customers without a redeploy. The same file is also on unpkg.

unpkg

<script src="https://unpkg.com/@coinfat/checkout@1/dist/coinfat.iife.js"></script>

Integrity (SRI)

For an immutable script, pin an exact version and add a Subresource Integrity hash. Each GitHub release publishes a paste-ready tag with its sha384 hash and a crossorigin attribute, the production-hardened option:

Pinned + SRI

<script
  src="https://cdn.jsdelivr.net/npm/@coinfat/checkout@1.0.2/dist/coinfat.iife.js"
  integrity="sha384-…"
  crossorigin="anonymous"></script>

Prefer the pinned + SRI form in production; use the floating @1 tag while you integrate.