stripe 20.2.0.pre.alpha.2 → 20.2.0.pre.alpha.3

data/lib/stripe/services/v2/money_management/received_debit_mandate_service.rb

@@ -5,6 +5,7 @@ module Stripe
   module V2
     module MoneyManagement
       class ReceivedDebitMandateService < StripeService
+        # Deprecated: Use CancelSpendingMandate instead.
         # Cancels an active ReceivedDebitMandate.
         def cancel(id, params = {}, opts = {})
           request(
@@ -16,6 +17,7 @@ module Stripe
           )
         end
 
+        # Deprecated: Use ListSpendingMandates instead.
         # Returns a list of ReceivedDebitMandates.
         def list(params = {}, opts = {})
           request(
@@ -27,6 +29,7 @@ module Stripe
           )
         end
 
+        # Deprecated: Use RetrieveSpendingMandate instead.
         # Retrieves the details of an existing ReceivedDebitMandate.
         def retrieve(id, params = {}, opts = {})
           request(

data/lib/stripe/services/v2/money_management/spending_mandate_service.rb

@@ -0,0 +1,43 @@
+# File generated from our OpenAPI spec
+# frozen_string_literal: true
+
+module Stripe
+  module V2
+    module MoneyManagement
+      class SpendingMandateService < StripeService
+        # Cancels an active SpendingMandate.
+        def cancel(id, params = {}, opts = {})
+          request(
+            method: :post,
+            path: format("/v2/money_management/spending_mandates/%<id>s/cancel", { id: CGI.escape(id) }),
+            params: params,
+            opts: opts,
+            base_address: :api
+          )
+        end
+
+        # Returns a list of SpendingMandates.
+        def list(params = {}, opts = {})
+          request(
+            method: :get,
+            path: "/v2/money_management/spending_mandates",
+            params: params,
+            opts: opts,
+            base_address: :api
+          )
+        end
+
+        # Retrieves the details of an existing SpendingMandate.
+        def retrieve(id, params = {}, opts = {})
+          request(
+            method: :get,
+            path: format("/v2/money_management/spending_mandates/%<id>s", { id: CGI.escape(id) }),
+            params: params,
+            opts: opts,
+            base_address: :api
+          )
+        end
+      end
+    end
+  end
+end

data/lib/stripe/services/v2/money_management_service.rb

@@ -4,7 +4,7 @@
 module Stripe
   module V2
     class MoneyManagementService < StripeService
-      attr_reader :adjustments, :currency_conversions, :debit_disputes, :earned_credits, :financial_accounts, :financial_addresses, :funding_intents, :funding_sessions, :inbound_fundings, :inbound_transfers, :inbound_transfer_mandates, :outbound_payments, :outbound_payment_quotes, :outbound_setup_intents, :outbound_transfers, :payout_intents, :payout_methods, :payout_methods_bank_account_spec, :received_credits, :received_debits, :received_debit_mandates, :recipient_verifications, :reward_programs, :reward_program_enrollments, :test_helpers, :transactions, :transaction_entries
+      attr_reader :adjustments, :currency_conversions, :debit_disputes, :earned_credits, :financial_accounts, :financial_addresses, :funding_intents, :funding_sessions, :inbound_fundings, :inbound_transfers, :inbound_transfer_mandates, :outbound_payments, :outbound_payment_quotes, :outbound_setup_intents, :outbound_transfers, :payout_intents, :payout_methods, :payout_methods_bank_account_spec, :received_credits, :received_debits, :received_debit_mandates, :recipient_verifications, :reward_programs, :reward_program_enrollments, :spending_mandates, :test_helpers, :transactions, :transaction_entries
 
       def initialize(requestor)
         super
@@ -40,6 +40,7 @@ module Stripe
         @reward_programs = Stripe::V2::MoneyManagement::RewardProgramService.new(@requestor)
         @reward_program_enrollments = Stripe::V2::MoneyManagement::RewardProgramEnrollmentService
                                       .new(@requestor)
+        @spending_mandates = Stripe::V2::MoneyManagement::SpendingMandateService.new(@requestor)
         @test_helpers = Stripe::V2::MoneyManagement::TestHelperService.new(@requestor)
         @transactions = Stripe::V2::MoneyManagement::TransactionService.new(@requestor)
         @transaction_entries = Stripe::V2::MoneyManagement::TransactionEntryService.new(@requestor)

data/lib/stripe/services.rb

@@ -546,6 +546,7 @@ module Stripe
       autoload :RecipientVerificationService, "stripe/services/v2/money_management/recipient_verification_service"
       autoload :RewardProgramEnrollmentService, "stripe/services/v2/money_management/reward_program_enrollment_service"
       autoload :RewardProgramService, "stripe/services/v2/money_management/reward_program_service"
+      autoload :SpendingMandateService, "stripe/services/v2/money_management/spending_mandate_service"
       autoload :TestHelperService, "stripe/services/v2/money_management/test_helper_service"
       autoload :TransactionEntryService, "stripe/services/v2/money_management/transaction_entry_service"
       autoload :TransactionService, "stripe/services/v2/money_management/transaction_service"
@@ -987,6 +988,7 @@ module Stripe
     stripe/services/v2/money_management/reward_program_enrollment_service
     stripe/services/v2/money_management/reward_program_service
     stripe/services/v2/money_management/reward_programs/rule_service
+    stripe/services/v2/money_management/spending_mandate_service
     stripe/services/v2/money_management/test_helper_service
     stripe/services/v2/money_management/test_helpers/financial_address_service
     stripe/services/v2/money_management/transaction_entry_service

data/lib/stripe/stripe_event_notification_handler.rb

@@ -2150,6 +2150,26 @@ module Stripe
       register("v2.money_management.reward_program.reward_reversed", &callback)
     end
 
+    def on_v2_money_management_spending_mandate_canceled(&callback)
+      register("v2.money_management.spending_mandate.canceled", &callback)
+    end
+
+    def on_v2_money_management_spending_mandate_created(&callback)
+      register("v2.money_management.spending_mandate.created", &callback)
+    end
+
+    def on_v2_money_management_spending_mandate_expired(&callback)
+      register("v2.money_management.spending_mandate.expired", &callback)
+    end
+
+    def on_v2_money_management_spending_mandate_pending_cancellation(&callback)
+      register("v2.money_management.spending_mandate.pending_cancellation", &callback)
+    end
+
+    def on_v2_money_management_spending_mandate_updated(&callback)
+      register("v2.money_management.spending_mandate.updated", &callback)
+    end
+
     def on_v2_money_management_transaction_created(&callback)
       register("v2.money_management.transaction.created", &callback)
     end

data/lib/stripe/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stripe
-  VERSION = "20.2.0-alpha.2"
+  VERSION = "20.2.0-alpha.3"
 end

data/lib/stripe/webhook.rb

@@ -76,6 +76,8 @@ module Stripe
 
     module Signature
       EXPECTED_SCHEME = "v1"
+      DebugMetadata = Struct.new(:secret, :destination, :payload)
+      private_constant :DebugMetadata
 
       # Computes a webhook signature given a time (probably the current time),
       # a payload, and a signing secret.
@@ -110,7 +112,7 @@ module Stripe
       def self.get_timestamp_and_signatures(header, scheme)
         list_items = header.split(/,\s*/).map { |i| i.split("=", 2) }
         timestamp = Integer(list_items.select { |i| i[0] == "t" }[0][1])
-        signatures = list_items.select { |i| i[0] == scheme }.map { |i| i[1] }
+        signatures = list_items.select { |i| i[0] == scheme }.map { |i| i[1] }.compact
         [Time.at(timestamp), signatures]
       end
       private_class_method :get_timestamp_and_signatures
@@ -152,7 +154,7 @@ module Stripe
         expected_sig = compute_signature(timestamp, payload, secret)
         unless signatures.any? { |s| Util.secure_compare(expected_sig, s) }
           raise SignatureVerificationError.new(
-            "No signatures found matching the expected signature for payload",
+            signature_error_message(header, payload, secret),
             header, http_body: payload
           )
         end
@@ -167,6 +169,63 @@ module Stripe
 
         true
       end
+
+      private_class_method def self.signature_error_message(header, payload, secret)
+        debug_metadata = signature_debug_metadata(header)
+
+        # If metadata has an asterisk-masked secret, compare against its length and last four characters
+        masked_secret = debug_metadata.secret || ""
+        masked_suffix = masked_secret[-4, 4]
+        secret_suffix = secret[-4, 4] || secret
+        if masked_secret&.include?("*") && (secret.length != masked_secret.length || secret_suffix != masked_suffix)
+          dashboard_url = "https://dashboard.stripe.com/webhooks"
+          dashboard_url += "/#{CGI.escape(debug_metadata.destination)}" if debug_metadata.destination
+          return "Webhook signature verification failed. This request may not have originated from Stripe.\n\n" \
+                 "The signing secret you provided is #{secret.length} characters long " \
+                 "and ends in `#{secret_suffix}`. " \
+                 "However, the signing secret for this destination is #{masked_secret.length} characters long " \
+                 "and looks like `#{masked_secret}`. Ensure you're using the signing secret for this " \
+                 "destination, as shown on the Dashboard: #{dashboard_url}\n\n" \
+                 "Learn more: https://docs.stripe.com/webhooks/signature"
+        end
+
+        # If metadata includes the truncated payload hash, compare with the payload passed in
+        if debug_metadata.payload&.match?(/\A[0-9a-fA-F]{8}\z/)
+          expected_hash = debug_metadata.payload.downcase
+          actual_hash = OpenSSL::Digest::SHA256.hexdigest(payload)[-8, 8]
+          if expected_hash != actual_hash
+            return "Webhook signature verification failed.\n\n" \
+                   "The request body you passed to this function differs from the request body sent by Stripe " \
+                   "to this webhook destination.\n" \
+                   "The SHA-256 hash of the body should end in `#{expected_hash}`. However, " \
+                   "the SHA-256 hash of the body you provided ends in `#{actual_hash}`.\n\n" \
+                   "Make sure your code does not reformat or otherwise alter the raw HTTP request body " \
+                   "before passing it to this function.\n\n" \
+                   "Learn more: https://docs.stripe.com/webhooks/signature"
+          end
+        end
+
+        # Fall back to the generic message if no debug metadata available
+        "No signatures found matching the expected signature for payload"
+      end
+
+      # Extract metadata from the stripe-signature header value to help debug verification failures
+      private_class_method def self.signature_debug_metadata(header)
+        # For each metadata key, extract the first value found in the header
+        metadata = DebugMetadata.new
+        list_items = header.b.split(/,\s*/).map { |item| item.split("=", 2) }
+        DebugMetadata.members.each do |key|
+          value = list_items.assoc(key.to_s)&.[](1)
+          value&.force_encoding(header.encoding)
+          metadata[key] = safe_metadata_value?(value) ? value : nil
+        end
+        metadata
+      end
+
+      private_class_method def self.safe_metadata_value?(value)
+        # Ignore overly long, potentially attacker-provided metadata values
+        value && value.length <= 100 && value.valid_encoding?
+      end
     end
   end
 end

data/rbi/stripe/resources/v2/core/event_base.rbi

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+# typed: true
+
+module Stripe
+  module V2
+    module Core
+      class EventBase < APIResource
+      end
+    end
+  end
+end