Acceptance versus production endpoints for PSB API, Identity Server, VPD and mailhooks. Avoid mixed-environment bugs.
Configure all hosts for acceptance before the first token request. Mixed environments (accp token with production call, or the reverse) cause cryptic 401/403 errors.
https://accp-psb.econnect.euhttps://psb.econnect.euhttps://accp-identity.econnect.euhttps://identity.econnect.euhttps://accp-vpd.econnect.eu/graphql/v1https://vpd.econnect.eu/graphql/v1@accp.econnect.email@econnect.emailhttps://accp-psb.econnect.euhttps://psb.econnect.euKeep the environment in one config object or env prefix, for example:
ECONNECT_ENV=accp
ECONNECT_IDENTITY_URL=https://accp-identity.econnect.eu
ECONNECT_PSB_URL=https://accp-psb.econnect.eu
ECONNECT_CLIENT_ID=...
ECONNECT_CLIENT_SECRET=...
Switch to production URLs and production credentials only when end-to-end tests (including webhook signatures) are green.
With hosts and credentials in place: Obtain an OAuth2 token.