Hosted Capital Sandbox
Understanding the Wayflyer Hosted Capital Sandbox and Reference App.
Understanding the Wayflyer Hosted Capital Sandbox and Reference App.
The sandbox makes it easy for partners to develop their integration with Wayflyer's Hosted Capital API. The sandbox simulates all interactions and state changes that may occur over a customer's application lifecycle.
Partners can easily switch between production and sandbox by simply switching to:
sandbox-api.wayflyer.com as the base URLPartners can be confident that if their integration works correctly in the sandbox, their integration will work correctly in production!

Additionally, Wayflyer provides a Sandbox UI Control that can be pulled into partner apps during development, to simplify experimentation and manual testing. However, partners may also leverage our sandbox SDK or API directly to drive automated integration tests.
The Sandbox control allows users to:
Rather than redirecting to wayflyer.com, the sandbox redirects partners to a handover page to confirm the information that would be passed to the customer's hosted application. The sandbox does not extend to the hosted application on wayflyer.com.
Please reach out to us if you have any questions!
To allow partners to experiment with the Wayflyer Hosted Capital service prior to developing their integration, a representative example web app is available. The app provides a complete reference implementation leveraging Wayflyer's UI SDK and our sandbox.
The reference app is available here: https://demo.wayflyerhostedcapital.com/
Partners should use their sandbox credientials when prompted.
Developers can review the code for the reference app here: https://github.com/wayflyer/hosted-capital-reference-app
Note that to create the simplest possible end-to-end implementation, the reference app fetches sandbox partner and company tokens, and uploads anonymous data from the frontend. Partner implementations must never pass production secrets to their frontend. Instead, partners should implement token fetching and data uploads from their backend to ensure security.