SaaSKit Production Readiness

Work through in order — skip sections that don't apply. Earlier sections are blockers for later ones.

Quick checks

# Confirm production credentials are set (not dev/staging)
echo $SCALEKIT_ENVIRONMENT_URL    # should be https://<subdomain>.scalekit.com (not .scalekit.dev)
echo $SCALEKIT_CLIENT_ID  # should be set
echo $SCALEKIT_CLIENT_SECRET  # should be set

• HTTPS enforced; CORS restricted to your domains only
• All credentials in environment variables — grep -r "sks_" src/ returns nothing
• Webhook secret in env vars (if using webhooks)

Core auth flows