stripe 20.1.0.pre.alpha.2 → 20.1.0.pre.alpha.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46373e53926671934bb55ac696fde661e2c3a5a746237207e6192bcf7204fac7
-  data.tar.gz: 8122ca92668b2753bd9cfa0178e5dfe9227fe8b38f192cefc9b8958ffa818d45
+  metadata.gz: d71cd26c3b7e58470fe45fd5b67a202423d14b1442b1eef7d438e7043224c330
+  data.tar.gz: 3f41a42dbdf2472269069de8bc6f240f2b5e1f720c626cf5ede531ae1dbf161d
 SHA512:
-  metadata.gz: 00a6aed992407f9643b2b3b131d7ae913836de9855e29d2a11f4c636121903049f168efad19680cfba7d68a800679672c3c9a2d163999a520d7a50ad30f6d3a0
-  data.tar.gz: a5ee0238a58417d360dd388245dbc923fd73a4bc9c4a4a6bf9dc7757def057731b272b16421de9d1258a632e3a46424ac6e3aa714c53f1fa1a965473ba40bd65
+  metadata.gz: 3a63b8dac31659ff1bad67b0a14ef7a12413700470995a1ba6f70c6fb942b9e327d2c334ac75e64af110ce24e32283bc80b805a1a3c8e0f58780520df396d399
+  data.tar.gz: d79e658cd191c1f2fd2cb46716710cc6edd9504758aa7f8bc7dcb7a985f2d2111b71c2b8e5506a9d624973ce195d3bebf6508cdfd2d6fd836d1d37c16f3a9630

data/lib/stripe/api_requestor.rb

@@ -490,7 +490,12 @@ module Stripe
 
       api_key ||= opts[:api_key]
 
-      check_api_key!(api_key)
+      if config.authenticator && config.api_key
+        raise AuthenticationError,
+              "Can't specify both api_key and authenticator."
+      end
+
+      check_api_key!(api_key) if api_key || !config.authenticator
 
       body_params = nil
       query_params = nil
@@ -507,6 +512,8 @@ module Stripe
       headers = request_headers(method, api_mode, opts)
       url = api_url(path, base_url)
 
+      auth_overridden = opts[:api_key] || opts[:headers]&.key?("Authorization")
+
       # Merge given query parameters with any already encoded in the path.
       query = query_params ? Util.encode_parameters(query_params, api_mode) : nil
 
@@ -541,7 +548,7 @@ module Stripe
         end
 
       http_resp =
-        execute_request_with_rescues(base_url, headers, api_mode, usage, context) do
+        execute_request_with_rescues(base_url, headers, api_mode, usage, context, auth_overridden) do
           self.class
               .default_connection_manager(config)
               .execute_request(method, url,
@@ -621,8 +628,13 @@ module Stripe
       http_status >= 400
     end
 
-    private def execute_request_with_rescues(base_url, headers, api_mode, usage, context)
+    private def execute_request_with_rescues(base_url, headers, api_mode, usage, context, auth_overridden)
       num_retries = 0
+      auth_replayed = false
+      workload_credentials =
+        if !auth_overridden && config.authenticator.is_a?(WorkloadIdentity::Authenticator)
+          config.authenticator.credentials
+        end
 
       begin
         request_start = nil
@@ -670,6 +682,13 @@ module Stripe
         notify_request_end(context, request_duration, http_status, num_retries,
                            user_data, resp, headers)
 
+        if workload_credentials && !auth_replayed && e.is_a?(AuthenticationError) && e.http_status == 401
+          auth_replayed = true
+          workload_credentials.refresh_token(WorkloadIdentity.extract_bearer_token(headers["Authorization"]))
+          headers["Authorization"] = config.authenticator.call
+          retry
+        end
+
         if self.class.should_retry?(e,
                                     num_retries: num_retries,
                                     config: config)
@@ -1018,6 +1037,18 @@ module Stripe
             message + "\n\n(Network error: #{error.message})"
     end
 
+    private def build_authorization_header(req_opts)
+      return req_opts[:headers]["Authorization"] if req_opts[:headers]&.key?("Authorization")
+      return "Bearer #{req_opts[:api_key]}" if req_opts[:api_key] || !config.authenticator
+
+      value = config.authenticator.call
+      unless value.is_a?(String) && !value.empty?
+        raise AuthenticationError, "The configured authenticator did not return a usable Authorization " \
+                                   "header value."
+      end
+      value
+    end
+
     private def request_headers(method, api_mode, req_opts)
       user_agent = "Stripe/#{api_mode} RubyBindings/#{Stripe::VERSION}"
       user_agent += " " + format_app_info(Stripe.app_info) unless Stripe.app_info.nil?
@@ -1027,7 +1058,7 @@ module Stripe
 
       headers = {
         "User-Agent" => user_agent,
-        "Authorization" => "Bearer #{req_opts[:api_key]}",
+        "Authorization" => build_authorization_header(req_opts),
       }
 
       if config.enable_telemetry?

data/lib/stripe/api_version.rb

@@ -3,7 +3,7 @@
 
 module Stripe
   module ApiVersion
-    CURRENT = "2026-10-07.preview"
+    CURRENT = "2026-10-14.preview"
     CURRENT_MAJOR = ""
   end
 end

data/lib/stripe/errors.rb

@@ -49,6 +49,12 @@ module Stripe
   class APIConnectionError < StripeError
   end
 
+  # WorkloadIdentityError is raised when workload identity authentication
+  # fails, for example because the identity provider couldn't produce an
+  # assertion or the token exchange was rejected
+  class WorkloadIdentityError < StripeError
+  end
+
   # APIError is a generic error that may be raised in cases where none of the
   # other named errors cover the problem. It could also be raised in the case
   # that a new error has been introduced in the API, but this version of the

data/lib/stripe/event_types.rb

@@ -711,8 +711,6 @@ module Stripe
         Events::V2PaymentsOffSessionPaymentFailedEvent,
         Events::V2PaymentsOffSessionPaymentPausedEvent.lookup_type =>
         Events::V2PaymentsOffSessionPaymentPausedEvent,
-        Events::V2PaymentsOffSessionPaymentRequiresCaptureEvent.lookup_type =>
-        Events::V2PaymentsOffSessionPaymentRequiresCaptureEvent,
         Events::V2PaymentsOffSessionPaymentResumedEvent.lookup_type =>
         Events::V2PaymentsOffSessionPaymentResumedEvent,
         Events::V2PaymentsOffSessionPaymentSucceededEvent.lookup_type =>
@@ -746,6 +744,8 @@ module Stripe
         Events::V2ReportingReportRunUpdatedEvent.lookup_type => Events::V2ReportingReportRunUpdatedEvent,
         Events::V2SignalsAccountEvaluationCompleteEvent.lookup_type =>
         Events::V2SignalsAccountEvaluationCompleteEvent,
+        Events::V2SignalsAccountSignalCustomerRiskReadyEvent.lookup_type =>
+        Events::V2SignalsAccountSignalCustomerRiskReadyEvent,
         Events::V2SignalsAccountSignalFraudulentMerchantReadyEvent.lookup_type =>
         Events::V2SignalsAccountSignalFraudulentMerchantReadyEvent,
         Events::V2SignalsAccountSignalFraudulentWebsiteReadyEvent.lookup_type =>
@@ -1611,8 +1611,6 @@ module Stripe
         Events::V2PaymentsOffSessionPaymentFailedEventNotification,
         Events::V2PaymentsOffSessionPaymentPausedEventNotification.lookup_type =>
         Events::V2PaymentsOffSessionPaymentPausedEventNotification,
-        Events::V2PaymentsOffSessionPaymentRequiresCaptureEventNotification.lookup_type =>
-        Events::V2PaymentsOffSessionPaymentRequiresCaptureEventNotification,
         Events::V2PaymentsOffSessionPaymentResumedEventNotification.lookup_type =>
         Events::V2PaymentsOffSessionPaymentResumedEventNotification,
         Events::V2PaymentsOffSessionPaymentSucceededEventNotification.lookup_type =>
@@ -1649,6 +1647,8 @@ module Stripe
         Events::V2ReportingReportRunUpdatedEventNotification,
         Events::V2SignalsAccountEvaluationCompleteEventNotification.lookup_type =>
         Events::V2SignalsAccountEvaluationCompleteEventNotification,
+        Events::V2SignalsAccountSignalCustomerRiskReadyEventNotification.lookup_type =>
+        Events::V2SignalsAccountSignalCustomerRiskReadyEventNotification,
         Events::V2SignalsAccountSignalFraudulentMerchantReadyEventNotification.lookup_type =>
         Events::V2SignalsAccountSignalFraudulentMerchantReadyEventNotification,
         Events::V2SignalsAccountSignalFraudulentWebsiteReadyEventNotification.lookup_type =>

data/lib/stripe/events/{v2_payments_off_session_payment_requires_capture_event.rb → v2_signals_account_signal_customer_risk_ready_event.rb}

@@ -3,10 +3,10 @@
 
 module Stripe
   module Events
-    # Deprecated. Sent when the off-session payment becomes available for capture.
-    class V2PaymentsOffSessionPaymentRequiresCaptureEvent < Stripe::V2::Core::Event
+    # Occurs when a customer's risk level changes and a new customer risk signal is ready.
+    class V2SignalsAccountSignalCustomerRiskReadyEvent < Stripe::V2::Core::Event
       def self.lookup_type
-        "v2.payments.off_session_payment.requires_capture"
+        "v2.signals.account_signal.customer_risk_ready"
       end
 
       # Retrieves the related object from the API. Makes an API request on every call.
@@ -21,15 +21,15 @@ module Stripe
       attr_reader :related_object
     end
 
-    # Deprecated. Sent when the off-session payment becomes available for capture.
-    class V2PaymentsOffSessionPaymentRequiresCaptureEventNotification < Stripe::V2::Core::EventNotification
+    # Occurs when a customer's risk level changes and a new customer risk signal is ready.
+    class V2SignalsAccountSignalCustomerRiskReadyEventNotification < Stripe::V2::Core::EventNotification
       def self.lookup_type
-        "v2.payments.off_session_payment.requires_capture"
+        "v2.signals.account_signal.customer_risk_ready"
       end
 
       attr_reader :related_object
 
-      # Retrieves the OffSessionPayment related to this EventNotification from the Stripe API. Makes an API request on every call.
+      # Retrieves the AccountSignal related to this EventNotification from the Stripe API. Makes an API request on every call.
       def fetch_related_object
         resp = @client.raw_request(
           :get,

data/lib/stripe/object_types.rb

@@ -171,6 +171,7 @@ module Stripe
         Reserve::Release.object_name => Reserve::Release,
         ReserveTransaction.object_name => ReserveTransaction,
         Review.object_name => Review,
+        Risk::Form.object_name => Risk::Form,
         RiskSignals.object_name => RiskSignals,
         SetupAttempt.object_name => SetupAttempt,
         SetupIntent.object_name => SetupIntent,
@@ -230,6 +231,7 @@ module Stripe
     def self.v2_object_names_to_classes
       {
         V2::ListObject.object_name => V2::ListObject,
+        V2::SearchResultObject.object_name => V2::SearchResultObject,
 
         # v2 object classes: The beginning of the section generated from our OpenAPI spec
         V2::Billing::BillSetting.object_name => V2::Billing::BillSetting,
@@ -290,6 +292,7 @@ module Stripe
         V2::Data::ReportRun.object_name => V2::Data::ReportRun,
         V2::Data::Reporting::QueryRun.object_name => V2::Data::Reporting::QueryRun,
         V2::Data::Schema.object_name => V2::Data::Schema,
+        V2::Data::SearchResultList.object_name => V2::Data::SearchResultList,
         V2::Extend::Workflow.object_name => V2::Extend::Workflow,
         V2::Extend::WorkflowRun.object_name => V2::Extend::WorkflowRun,
         V2::Iam::ActivityLog.object_name => V2::Iam::ActivityLog,

data/lib/stripe/params/account_create_params.rb

@@ -1691,7 +1691,7 @@ module Stripe
       end
 
       class Fees < ::Stripe::RequestParams
-        # A value indicating the responsible payer of Stripe fees on this account. Defaults to `account`. Learn more about [fee behavior on connected accounts](https://docs.stripe.com/connect/direct-charges-fee-payer-behavior).
+        # Controls who pays Stripe fees for direct charges and other pricing-control-eligible Stripe products. Setting `controller.losses.payments=application` requires `controller.fees.payer=application`. For destination charges and separate charges and transfers, Stripe bills the platform regardless of this setting. Defaults to `account`. Learn more about [fee behavior on connected accounts](https://docs.stripe.com/connect/direct-charges-fee-payer-behavior), including application fees and pricing considerations.
         attr_accessor :payer
 
         def initialize(payer: nil)
@@ -1700,7 +1700,7 @@ module Stripe
       end
 
       class Losses < ::Stripe::RequestParams
-        # A value indicating who is liable when this account can't pay back negative balances resulting from payments. Defaults to `stripe`.
+        # Controls who is responsible for payment-related negative balances on this account. The platform remains liable for negative balances on its own account. To use Stripe negative balance liability, your integration must meet [Managed Risk requirements](https://docs.stripe.com/connect/risk-management/managed-risk). Defaults to `stripe`.
         attr_accessor :payments
 
         def initialize(payments: nil)
@@ -2579,12 +2579,12 @@ module Stripe
         end
       end
 
-      class WechatPayPayments < ::Stripe::RequestParams
-        # The domains of the user's mobile web checkout pages for WeChat Pay payments. At most 4 domains are allowed.
-        attr_accessor :mobile_web_domains
+      class WechatPayMobileWebPayments < ::Stripe::RequestParams
+        # The domains of the user's mobile web checkout pages for WeChat Pay payments.
+        attr_accessor :domains
 
-        def initialize(mobile_web_domains: nil)
-          @mobile_web_domains = mobile_web_domains
+        def initialize(domains: nil)
+          @domains = domains
         end
       end
       # Settings specific to Bacs Direct Debit.
@@ -2615,8 +2615,8 @@ module Stripe
       attr_accessor :tax_forms
       # Settings specific to the account's Treasury FinancialAccounts.
       attr_accessor :treasury
-      # Settings specific to the WeChat Pay payments method.
-      attr_accessor :wechat_pay_payments
+      # Settings specific to WeChat Pay payments made through a mobile web browser.
+      attr_accessor :wechat_pay_mobile_web_payments
 
       def initialize(
         bacs_debit_payments: nil,
@@ -2633,7 +2633,7 @@ module Stripe
         smart_disputes: nil,
         tax_forms: nil,
         treasury: nil,
-        wechat_pay_payments: nil
+        wechat_pay_mobile_web_payments: nil
       )
         @bacs_debit_payments = bacs_debit_payments
         @bank_bca_onboarding = bank_bca_onboarding
@@ -2649,7 +2649,7 @@ module Stripe
         @smart_disputes = smart_disputes
         @tax_forms = tax_forms
         @treasury = treasury
-        @wechat_pay_payments = wechat_pay_payments
+        @wechat_pay_mobile_web_payments = wechat_pay_mobile_web_payments
       end
     end
 
@@ -2687,7 +2687,7 @@ module Stripe
     attr_accessor :capabilities
     # Information about the company or business. This field is available for any `business_type`. Once you create an [Account Link](/api/account_links) or [Account Session](/api/account_sessions), this property can only be updated for accounts where [controller.requirement_collection](/api/accounts/object#account_object-controller-requirement_collection) is `application`, which includes Custom accounts.
     attr_accessor :company
-    # A hash of configuration describing the account controller's attributes.
+    # Configures the account's Dashboard access, loss liability, requirements collection, and Stripe fee responsibility.
     attr_accessor :controller
     # The country in which the account holder resides, or in which the business is legally established. This should be an ISO 3166-1 alpha-2 country code. For example, if you are in the United States and the business for which you're creating an account is legally represented in Canada, you would use `CA` as the country for the account being created. Available countries include [Stripe's global markets](https://stripe.com/global) as well as countries where [cross-border payouts](https://stripe.com/docs/connect/cross-border-payouts) are supported.
     attr_accessor :country

data/lib/stripe/params/account_update_params.rb

@@ -2532,12 +2532,12 @@ module Stripe
         end
       end
 
-      class WechatPayPayments < ::Stripe::RequestParams
-        # The domains of the user's mobile web checkout pages for WeChat Pay payments. At most 4 domains are allowed.
-        attr_accessor :mobile_web_domains
+      class WechatPayMobileWebPayments < ::Stripe::RequestParams
+        # The domains of the user's mobile web checkout pages for WeChat Pay payments.
+        attr_accessor :domains
 
-        def initialize(mobile_web_domains: nil)
-          @mobile_web_domains = mobile_web_domains
+        def initialize(domains: nil)
+          @domains = domains
         end
       end
       # Settings specific to Bacs Direct Debit payments.
@@ -2568,8 +2568,8 @@ module Stripe
       attr_accessor :tax_forms
       # Settings specific to the account's Treasury FinancialAccounts.
       attr_accessor :treasury
-      # Settings specific to the WeChat Pay payments method.
-      attr_accessor :wechat_pay_payments
+      # Settings specific to WeChat Pay payments made through a mobile web browser.
+      attr_accessor :wechat_pay_mobile_web_payments
 
       def initialize(
         bacs_debit_payments: nil,
@@ -2586,7 +2586,7 @@ module Stripe
         smart_disputes: nil,
         tax_forms: nil,
         treasury: nil,
-        wechat_pay_payments: nil
+        wechat_pay_mobile_web_payments: nil
       )
         @bacs_debit_payments = bacs_debit_payments
         @bank_bca_onboarding = bank_bca_onboarding
@@ -2602,7 +2602,7 @@ module Stripe
         @smart_disputes = smart_disputes
         @tax_forms = tax_forms
         @treasury = treasury
-        @wechat_pay_payments = wechat_pay_payments
+        @wechat_pay_mobile_web_payments = wechat_pay_mobile_web_payments
       end
     end