Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(next): parse a webhook event without the secret #611

Merged
merged 1 commit into from
Sep 24, 2024

Conversation

lasantosr
Copy link

Summary

Added a new method to parse a webhook event without validating the secret.

I've named the method Webhook::insecure to make it clear that it's not secure to use it, must be used for local testing only and a link to the method to be used in production.

Some of the use cases are:

  • Early stages of development
  • Automating a local testing environment using the stripe cli listen command to forward events, when there is no way of retrieving the secret from the listen output to use in the integration

Checklist

@arlyon
Copy link
Owner

arlyon commented Sep 24, 2024

I am ok with this. I was hoping there was some API to allow warning on release builds but there is not so lets do it anyways.

@arlyon
Copy link
Owner

arlyon commented Sep 24, 2024

Thanks for taking the time!

@arlyon arlyon merged commit aca76f2 into arlyon:next Sep 24, 2024
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants