stripe-node

stripe-node copied to clipboard

Math.random() is not a cryptographically secure way to generate UUIDv4s

2

https://github.com/stripe/stripe-node/blob/ec960ead66f9942d68804f1a91dce8988d8d9660/lib/utils.js#L409 The function uses an outdated method of generating UUIDv4s that does not follow current PRNG guidance for UUIDv4 generation. The referenced comment above the function (https://stackoverflow.com/a/2117523) has an updated...

gen0cide

add more enums for disabled/failure reasons

2

JipSterk

Redact anything resembling Stripe keys when logging

3

richardm-stripe

Expose constants

2

Would it possible to expose constants on the relevant API endpoints (or in its own namespace)? For example: ```js stripe.constants.subscriptionStatuses = { TRIALING: 'trialing', ACTIVE: 'active', PAST_DUE: 'past_due', CANCELED: 'canceled',...

adamreisnz

Codegen for openapi v196. cc @stripe/api-libraries ## Changelog * Updated stable APIs to the latest version

pakrym-stripe

Typescript `PriceUpdateParams` doesn't respect `currency_options.<currency>` properties on update

2

### Describe the bug When trying to update a `Stripe.Price` I'm not able to set the new `unit_amount` using a "top-level param". The `PriceUpdateParams` interface only allows for `unit_amount` to...

BMO-tech

TypeScript types are invalid when expanding responses

9

### Describe the bug When expanding responses as per the documentation [here](https://stripe.com/docs/api/expanding_objects?lang=node), the return types for various Stripe methods are not updated to accurately reflect the modified responses. ### To...

isaachinman

`Stripe.Metadata` has incorrect type

3

### Describe the bug The type for `Stripe.Metadata` is `{ [name: string]: string; }` which is incorrect; this specifies that all keys have a value of `string` when in reality,...

SpencerKaiser

Fixing an issue with metadata's type

2

### ⚠️ THIS IS A BREAKING CHANGE FOR TYPESCRIPT USERS Only merge this into a `minor` or `major` release Fixes #1553

SpencerKaiser

Use async functions within request handling code

8

### Is your feature request related to a problem? Please describe. Currently, there is a lot of `setTimeout`s and other non-async-y code that means that we cannot take advantage of...

rtpg