Validation and Testing

Validates Cashfree Payments integrations using sandbox credentials, webhook verification, and go-live checklists.

Updated Sep 8, 2026
One-click install
npx skills add https://github.com/dasara-varun/orange --skill validation-and-testing-dasara-varun
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Validation and Testing
Source: https://github.com/dasara-varun/orange/tree/main/.cursor/cashfree-skills/validation-and-testing
Command: npx skills add https://github.com/dasara-varun/orange --skill validation-and-testing-dasara-varun

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Payment integrations often appear finished while hiding critical gaps like missing domain whitelisting, unverified webhook signatures, or frontend-only fulfilment. This Skill provides a rigorous validation checklist, sandbox test credentials, and go-live readiness checks so developers can verify a Cashfree Payments integration before claiming it is production-ready. ## Core Features & Use Cases - Pre-Launch Validation Checklist: Enforces a 13-point readiness audit covering domain whitelisting, SDK initialization, 3-state checkout promise handling, server-side order verification, webhook signature verification, idempotency, and environment variable hygiene. - Sandbox Test Credentials: Provides test cards (Visa, Mastercard, Rupay), UPI VPAs for every outcome scenario, net banking, TPV, paylater, and payouts test data for end-to-end sandbox testing. - Webhook Security Verification: Documents HMAC-SHA256 signature verification using the raw request body with x-webhook-signature and x-webhook-timestamp headers, with SDK examples in Node.js, Go, and PHP. - Use Case: A developer finishes integrating Cashfree checkout and asks if it is ready to ship. The Skill walks through each checklist item, tests failure scenarios with sandbox VPAs like testfailure@gocash, verifies webhook signatures, and reports exactly which items remain incomplete. ## Quick Start Ask the assistant to validate my Cashfree Payments integration against the go-live checklist and report the status of each item.

Frequently Asked Questions about Validation and Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test a Cashfree Payments integration in sandbox mode?▼

Use sandbox credentials with the TEST_ prefix and the base URL https://sandbox.cashfree.com/pg. Test cards use OTP 111000, expiry 03/2028, and CVV 123, while UPI testing uses VPAs like testsuccess@gocash and testfailure@gocash to simulate outcomes.

How do I verify Cashfree webhook signatures on my server?▼

Concatenate the x-webhook-timestamp header with the raw request body, compute HMAC-SHA256 with your secret key, and Base64-encode the result for comparison with x-webhook-signature. Always use the raw payload, not the parsed body, or verification fails.

What test cards does Cashfree sandbox support?▼

Cashfree sandbox supports Visa, Mastercard, and Rupay test cards across debit, credit, retail, premium, and corporate types. All use OTP 111000, expiry 03/2028, and CVV 123. PayPal and bank transfers are not supported in sandbox.

Why does Cashfree checkout fail in production but work in sandbox?▼

The most common cause is a missing domain or app package whitelisting on the production dashboard, which silently blocks checkout. Also verify production API keys, the production mode flag, the https://api.cashfree.com base URL, and registered production webhook URLs.

When should fulfilment happen after a Cashfree payment?▼

Fulfilment should happen only after the backend confirms order_status equals PAID via the Get Order API. Never fulfil based on frontend checkout callbacks alone, and ensure webhook handling is idempotent so duplicate deliveries do not double-fulfil.