A practical guide for collecting DOKU Production credentials, setting the Notification URL, and avoiding QRIS signature errors in OurBooth.
OurBooth generates Dynamic QRIS through DOKU SNAP BI. To create QRIS and receive paid status quickly on Android, prepare a complete Production credential set from DOKU Back Office.
Do not mix Sandbox and Production
Every value in the OurBooth form must come from DOKU Production. Mixing Production Client ID with Sandbox Secret Key can produce signature mismatch or unauthorized errors.
OurBooth uses the Shared Key to verify that payment webhooks really come from DOKU. In some DOKU Back Office layouts, it appears under Settings > API Key in the merchant/public DOKU section. Copy the Shared Key exactly; do not replace it with Public Key or API Key.
The Notification URL lets DOKU send payment status to OurBooth immediately after the customer pays. Without it, QRIS may still be generated, but Android has to wait for polling or inquiry fallback, which feels slower.
OurBooth Notification URL
Use https://ourbooth-upload-signer.edison-thomas52.workers.dev/v1/webhooks/doku. The URL must be public HTTPS, not localhost, VPN-only, or protected by login.
When you click Save Credentials in OurBooth, the system creates an RSA keypair. The Private Key is stored encrypted, while the Public Key must be copied to DOKU.
| OurBooth field | DOKU location | Notes |
|---|---|---|
| Client ID | Settings > Checkout Appearance > QRIS Credential Settings or API Keys | Usually BRN- or MCH- |
| Active Secret Key | Settings > API Keys | Click Reveal Key. Do not use API Key. |
| Merchant ID | QRIS Credential Settings | Numeric merchant/credential mall ID. |
| Terminal ID | QR Payment or QRIS Credential Settings | Usually A01. |
| Postal Code | QR Payment or merchant outlet data | Must be 5 digits. |
| Fee Type | QR Payment or DOKU instruction |
Open tenant settings, enable QRIS Gateway, save DOKU credentials, set the Notification URL in DOKU, then run a test QRIS before your event.
| Usually 1. |
| Shared Key | Settings > API Key, merchant/public DOKU section | Used for webhook verification. |
| MPAN/NMID | QRIS Credential Settings or QRIS certificate | Used for merchant audit/matching. |