stripe 4.24.0 → 5.36.0

data/lib/stripe/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stripe
-  VERSION = "4.24.0".freeze
+  VERSION = "5.36.0"
 end

data/lib/stripe/webhook.rb

@@ -22,12 +22,39 @@ module Stripe
     end
 
     module Signature
-      EXPECTED_SCHEME = "v1".freeze
+      EXPECTED_SCHEME = "v1"
 
-      def self.compute_signature(payload, secret)
-        OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new("sha256"), secret, payload)
+      # Computes a webhook signature given a time (probably the current time),
+      # a payload, and a signing secret.
+      def self.compute_signature(timestamp, payload, secret)
+        raise ArgumentError, "timestamp should be an instance of Time" \
+          unless timestamp.is_a?(Time)
+        raise ArgumentError, "payload should be a string" \
+          unless payload.is_a?(String)
+        raise ArgumentError, "secret should be a string" \
+          unless secret.is_a?(String)
+
+        timestamped_payload = "#{timestamp.to_i}.#{payload}"
+        OpenSSL::HMAC.hexdigest(OpenSSL::Digest.new("sha256"), secret,
+                                timestamped_payload)
+      end
+
+      # Generates a value that would be added to a `Stripe-Signature` for a
+      # given webhook payload.
+      #
+      # Note that this isn't needed to verify webhooks in any way, and is
+      # mainly here for use in test cases (those that are both within this
+      # project and without).
+      def self.generate_header(timestamp, signature, scheme: EXPECTED_SCHEME)
+        raise ArgumentError, "timestamp should be an instance of Time" \
+          unless timestamp.is_a?(Time)
+        raise ArgumentError, "signature should be a string" \
+          unless signature.is_a?(String)
+        raise ArgumentError, "scheme should be a string" \
+          unless scheme.is_a?(String)
+
+        "t=#{timestamp.to_i},#{scheme}=#{signature}"
       end
-      private_class_method :compute_signature
 
       # Extracts the timestamp and the signature(s) with the desired scheme
       # from the header
@@ -35,7 +62,7 @@ module Stripe
         list_items = header.split(/,\s*/).map { |i| i.split("=", 2) }
         timestamp = Integer(list_items.select { |i| i[0] == "t" }[0][1])
         signatures = list_items.select { |i| i[0] == scheme }.map { |i| i[1] }
-        [timestamp, signatures]
+        [Time.at(timestamp), signatures]
       end
       private_class_method :get_timestamp_and_signatures
 
@@ -53,6 +80,11 @@ module Stripe
         begin
           timestamp, signatures =
             get_timestamp_and_signatures(header, EXPECTED_SCHEME)
+
+        # TODO: Try to knock over this blanket rescue as it can unintentionally
+        # swallow many valid errors. Instead, try to validate an incoming
+        # header one piece at a time, and error with a known exception class if
+        # any part is found to be invalid. Rescue that class here.
         rescue StandardError
           raise SignatureVerificationError.new(
             "Unable to extract timestamp and signatures from header",
@@ -67,8 +99,7 @@ module Stripe
           )
         end
 
-        signed_payload = "#{timestamp}.#{payload}"
-        expected_sig = compute_signature(signed_payload, secret)
+        expected_sig = compute_signature(timestamp, payload, secret)
         unless signatures.any? { |s| Util.secure_compare(expected_sig, s) }
           raise SignatureVerificationError.new(
             "No signatures found matching the expected signature for payload",
@@ -76,7 +107,7 @@ module Stripe
           )
         end
 
-        if tolerance && timestamp < Time.now.to_f - tolerance
+        if tolerance && timestamp < Time.now - tolerance
           raise SignatureVerificationError.new(
             "Timestamp outside the tolerance zone (#{Time.at(timestamp)})",
             header, http_body: payload

data/stripe.gemspec

@@ -7,7 +7,7 @@ require "stripe/version"
 Gem::Specification.new do |s|
   s.name = "stripe"
   s.version = Stripe::VERSION
-  s.required_ruby_version = ">= 2.1.0"
+  s.required_ruby_version = ">= 2.3.0"
   s.summary = "Ruby bindings for the Stripe API"
   s.description = "Stripe is the easiest way to accept payments online.  " \
                   "See https://stripe.com for details."
@@ -17,20 +17,24 @@ Gem::Specification.new do |s|
   s.license = "MIT"
 
   s.metadata = {
-    "bug_tracker_uri"   => "https://github.com/stripe/stripe-ruby/issues",
-    "changelog_uri"     =>
+    "bug_tracker_uri" => "https://github.com/stripe/stripe-ruby/issues",
+    "changelog_uri" =>
       "https://github.com/stripe/stripe-ruby/blob/master/CHANGELOG.md",
     "documentation_uri" => "https://stripe.com/docs/api/ruby",
-    "github_repo"       => "ssh://github.com/stripe/stripe-ruby",
-    "homepage_uri"      => "https://stripe.com/docs/api/ruby",
-    "source_code_uri"   => "https://github.com/stripe/stripe-ruby",
+    "github_repo" => "ssh://github.com/stripe/stripe-ruby",
+    "homepage_uri" => "https://stripe.com/docs/api/ruby",
+    "source_code_uri" => "https://github.com/stripe/stripe-ruby",
   }
 
-  s.add_dependency("faraday", "~> 0.13")
-  s.add_dependency("net-http-persistent", "~> 3.0")
-
-  s.files = `git ls-files`.split("\n")
-  s.test_files    = `git ls-files -- test/*`.split("\n")
+  ignored = Regexp.union(
+    /\A\.editorconfig/,
+    /\A\.git/,
+    /\A\.rubocop/,
+    /\A\.travis.yml/,
+    /\A\.vscode/,
+    /\Atest/
+  )
+  s.files = `git ls-files`.split("\n").reject { |f| ignored.match(f) }
   s.executables   = `git ls-files -- bin/*`.split("\n")
                                            .map { |f| ::File.basename(f) }
   s.require_paths = ["lib"]

metadata

@@ -1,43 +1,15 @@
 --- !ruby/object:Gem::Specification
 name: stripe
 version: !ruby/object:Gem::Version
-  version: 4.24.0
+  version: 5.36.0
 platform: ruby
 authors:
 - Stripe
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-08-13 00:00:00.000000000 Z
-dependencies:
-- !ruby/object:Gem::Dependency
-  name: faraday
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.13'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '0.13'
-- !ruby/object:Gem::Dependency
-  name: net-http-persistent
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.0'
+date: 2021-07-09 00:00:00.000000000 Z
+dependencies: []
 description: Stripe is the easiest way to accept payments online.  See https://stripe.com
   for details.
 email: support@stripe.com
@@ -46,16 +18,8 @@ executables:
 extensions: []
 extra_rdoc_files: []
 files:
-- ".editorconfig"
-- ".gitattributes"
-- ".github/ISSUE_TEMPLATE.md"
-- ".gitignore"
-- ".rubocop.yml"
-- ".rubocop_todo.yml"
-- ".travis.yml"
-- ".vscode/extensions.json"
-- ".vscode/settings.json"
 - CHANGELOG.md
+- CODE_OF_CONDUCT.md
 - CONTRIBUTORS
 - Gemfile
 - History.txt
@@ -73,8 +37,12 @@ files:
 - lib/stripe/api_operations/request.rb
 - lib/stripe/api_operations/save.rb
 - lib/stripe/api_resource.rb
+- lib/stripe/connection_manager.rb
+- lib/stripe/error_object.rb
 - lib/stripe/errors.rb
+- lib/stripe/instrumentation.rb
 - lib/stripe/list_object.rb
+- lib/stripe/multipart_encoder.rb
 - lib/stripe/oauth.rb
 - lib/stripe/object_types.rb
 - lib/stripe/resources.rb
@@ -87,6 +55,8 @@ files:
 - lib/stripe/resources/balance.rb
 - lib/stripe/resources/balance_transaction.rb
 - lib/stripe/resources/bank_account.rb
+- lib/stripe/resources/billing_portal/configuration.rb
+- lib/stripe/resources/billing_portal/session.rb
 - lib/stripe/resources/bitcoin_receiver.rb
 - lib/stripe/resources/bitcoin_transaction.rb
 - lib/stripe/resources/capability.rb
@@ -96,6 +66,7 @@ files:
 - lib/stripe/resources/country_spec.rb
 - lib/stripe/resources/coupon.rb
 - lib/stripe/resources/credit_note.rb
+- lib/stripe/resources/credit_note_line_item.rb
 - lib/stripe/resources/customer.rb
 - lib/stripe/resources/customer_balance_transaction.rb
 - lib/stripe/resources/discount.rb
@@ -105,17 +76,20 @@ files:
 - lib/stripe/resources/exchange_rate.rb
 - lib/stripe/resources/file.rb
 - lib/stripe/resources/file_link.rb
+- lib/stripe/resources/identity/verification_report.rb
+- lib/stripe/resources/identity/verification_session.rb
 - lib/stripe/resources/invoice.rb
 - lib/stripe/resources/invoice_item.rb
 - lib/stripe/resources/invoice_line_item.rb
-- lib/stripe/resources/issuer_fraud_record.rb
 - lib/stripe/resources/issuing/authorization.rb
 - lib/stripe/resources/issuing/card.rb
 - lib/stripe/resources/issuing/card_details.rb
 - lib/stripe/resources/issuing/cardholder.rb
 - lib/stripe/resources/issuing/dispute.rb
 - lib/stripe/resources/issuing/transaction.rb
+- lib/stripe/resources/line_item.rb
 - lib/stripe/resources/login_link.rb
+- lib/stripe/resources/mandate.rb
 - lib/stripe/resources/order.rb
 - lib/stripe/resources/order_return.rb
 - lib/stripe/resources/payment_intent.rb
@@ -123,7 +97,10 @@ files:
 - lib/stripe/resources/payout.rb
 - lib/stripe/resources/person.rb
 - lib/stripe/resources/plan.rb
+- lib/stripe/resources/price.rb
 - lib/stripe/resources/product.rb
+- lib/stripe/resources/promotion_code.rb
+- lib/stripe/resources/quote.rb
 - lib/stripe/resources/radar/early_fraud_warning.rb
 - lib/stripe/resources/radar/value_list.rb
 - lib/stripe/resources/radar/value_list_item.rb
@@ -134,6 +111,7 @@ files:
 - lib/stripe/resources/reporting/report_type.rb
 - lib/stripe/resources/reversal.rb
 - lib/stripe/resources/review.rb
+- lib/stripe/resources/setup_attempt.rb
 - lib/stripe/resources/setup_intent.rb
 - lib/stripe/resources/sigma/scheduled_query_run.rb
 - lib/stripe/resources/sku.rb
@@ -142,6 +120,7 @@ files:
 - lib/stripe/resources/subscription.rb
 - lib/stripe/resources/subscription_item.rb
 - lib/stripe/resources/subscription_schedule.rb
+- lib/stripe/resources/tax_code.rb
 - lib/stripe/resources/tax_id.rb
 - lib/stripe/resources/tax_rate.rb
 - lib/stripe/resources/terminal/connection_token.rb
@@ -156,98 +135,13 @@ files:
 - lib/stripe/resources/webhook_endpoint.rb
 - lib/stripe/singleton_api_resource.rb
 - lib/stripe/stripe_client.rb
+- lib/stripe/stripe_configuration.rb
 - lib/stripe/stripe_object.rb
 - lib/stripe/stripe_response.rb
 - lib/stripe/util.rb
 - lib/stripe/version.rb
 - lib/stripe/webhook.rb
 - stripe.gemspec
-- test/api_stub_helpers.rb
-- test/openapi/README.md
-- test/stripe/account_link_test.rb
-- test/stripe/account_test.rb
-- test/stripe/alipay_account_test.rb
-- test/stripe/api_operations_test.rb
-- test/stripe/api_resource_test.rb
-- test/stripe/apple_pay_domain_test.rb
-- test/stripe/application_fee_refund_test.rb
-- test/stripe/application_fee_test.rb
-- test/stripe/balance_test.rb
-- test/stripe/balance_transaction_test.rb
-- test/stripe/bank_account_test.rb
-- test/stripe/capability_test.rb
-- test/stripe/charge_test.rb
-- test/stripe/checkout/session_test.rb
-- test/stripe/country_spec_test.rb
-- test/stripe/coupon_test.rb
-- test/stripe/credit_note_test.rb
-- test/stripe/customer_balance_transaction_test.rb
-- test/stripe/customer_card_test.rb
-- test/stripe/customer_test.rb
-- test/stripe/dispute_test.rb
-- test/stripe/ephemeral_key_test.rb
-- test/stripe/errors_test.rb
-- test/stripe/exchange_rate_test.rb
-- test/stripe/file_link_test.rb
-- test/stripe/file_test.rb
-- test/stripe/file_upload_test.rb
-- test/stripe/invoice_item_test.rb
-- test/stripe/invoice_line_item_test.rb
-- test/stripe/invoice_test.rb
-- test/stripe/issuer_fraud_record_test.rb
-- test/stripe/issuing/authorization_test.rb
-- test/stripe/issuing/card_test.rb
-- test/stripe/issuing/cardholder_test.rb
-- test/stripe/issuing/dispute_test.rb
-- test/stripe/issuing/transaction_test.rb
-- test/stripe/list_object_test.rb
-- test/stripe/login_link_test.rb
-- test/stripe/oauth_test.rb
-- test/stripe/order_return_test.rb
-- test/stripe/order_test.rb
-- test/stripe/payment_intent_test.rb
-- test/stripe/payment_method_test.rb
-- test/stripe/payout_test.rb
-- test/stripe/person_test.rb
-- test/stripe/plan_test.rb
-- test/stripe/product_test.rb
-- test/stripe/radar/early_fraud_warning_test.rb
-- test/stripe/radar/value_list_item_test.rb
-- test/stripe/radar/value_list_test.rb
-- test/stripe/recipient_test.rb
-- test/stripe/refund_test.rb
-- test/stripe/reporting/report_run_test.rb
-- test/stripe/reporting/report_type_test.rb
-- test/stripe/reversal_test.rb
-- test/stripe/review_test.rb
-- test/stripe/setup_intent_test.rb
-- test/stripe/sigma/scheduled_query_run_test.rb
-- test/stripe/sku_test.rb
-- test/stripe/source_test.rb
-- test/stripe/source_transaction_test.rb
-- test/stripe/stripe_client_test.rb
-- test/stripe/stripe_object_test.rb
-- test/stripe/stripe_response_test.rb
-- test/stripe/subscription_item_test.rb
-- test/stripe/subscription_schedule_test.rb
-- test/stripe/subscription_test.rb
-- test/stripe/tax_id_test.rb
-- test/stripe/tax_rate_test.rb
-- test/stripe/terminal/connection_token_test.rb
-- test/stripe/terminal/location_test.rb
-- test/stripe/terminal/reader_test.rb
-- test/stripe/three_d_secure_test.rb
-- test/stripe/topup_test.rb
-- test/stripe/transfer_test.rb
-- test/stripe/usage_record_summary_test.rb
-- test/stripe/usage_record_test.rb
-- test/stripe/util_test.rb
-- test/stripe/webhook_endpoint_test.rb
-- test/stripe/webhook_test.rb
-- test/stripe_mock.rb
-- test/stripe_test.rb
-- test/test_data.rb
-- test/test_helper.rb
 homepage: https://stripe.com/docs/api/ruby
 licenses:
 - MIT
@@ -266,101 +160,15 @@ required_ruby_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
-      version: 2.1.0
+      version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
   - - ">="
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.0.3
+rubygems_version: 3.1.2
 signing_key: 
 specification_version: 4
 summary: Ruby bindings for the Stripe API
-test_files:
-- test/api_stub_helpers.rb
-- test/openapi/README.md
-- test/stripe/account_link_test.rb
-- test/stripe/account_test.rb
-- test/stripe/alipay_account_test.rb
-- test/stripe/api_operations_test.rb
-- test/stripe/api_resource_test.rb
-- test/stripe/apple_pay_domain_test.rb
-- test/stripe/application_fee_refund_test.rb
-- test/stripe/application_fee_test.rb
-- test/stripe/balance_test.rb
-- test/stripe/balance_transaction_test.rb
-- test/stripe/bank_account_test.rb
-- test/stripe/capability_test.rb
-- test/stripe/charge_test.rb
-- test/stripe/checkout/session_test.rb
-- test/stripe/country_spec_test.rb
-- test/stripe/coupon_test.rb
-- test/stripe/credit_note_test.rb
-- test/stripe/customer_balance_transaction_test.rb
-- test/stripe/customer_card_test.rb
-- test/stripe/customer_test.rb
-- test/stripe/dispute_test.rb
-- test/stripe/ephemeral_key_test.rb
-- test/stripe/errors_test.rb
-- test/stripe/exchange_rate_test.rb
-- test/stripe/file_link_test.rb
-- test/stripe/file_test.rb
-- test/stripe/file_upload_test.rb
-- test/stripe/invoice_item_test.rb
-- test/stripe/invoice_line_item_test.rb
-- test/stripe/invoice_test.rb
-- test/stripe/issuer_fraud_record_test.rb
-- test/stripe/issuing/authorization_test.rb
-- test/stripe/issuing/card_test.rb
-- test/stripe/issuing/cardholder_test.rb
-- test/stripe/issuing/dispute_test.rb
-- test/stripe/issuing/transaction_test.rb
-- test/stripe/list_object_test.rb
-- test/stripe/login_link_test.rb
-- test/stripe/oauth_test.rb
-- test/stripe/order_return_test.rb
-- test/stripe/order_test.rb
-- test/stripe/payment_intent_test.rb
-- test/stripe/payment_method_test.rb
-- test/stripe/payout_test.rb
-- test/stripe/person_test.rb
-- test/stripe/plan_test.rb
-- test/stripe/product_test.rb
-- test/stripe/radar/early_fraud_warning_test.rb
-- test/stripe/radar/value_list_item_test.rb
-- test/stripe/radar/value_list_test.rb
-- test/stripe/recipient_test.rb
-- test/stripe/refund_test.rb
-- test/stripe/reporting/report_run_test.rb
-- test/stripe/reporting/report_type_test.rb
-- test/stripe/reversal_test.rb
-- test/stripe/review_test.rb
-- test/stripe/setup_intent_test.rb
-- test/stripe/sigma/scheduled_query_run_test.rb
-- test/stripe/sku_test.rb
-- test/stripe/source_test.rb
-- test/stripe/source_transaction_test.rb
-- test/stripe/stripe_client_test.rb
-- test/stripe/stripe_object_test.rb
-- test/stripe/stripe_response_test.rb
-- test/stripe/subscription_item_test.rb
-- test/stripe/subscription_schedule_test.rb
-- test/stripe/subscription_test.rb
-- test/stripe/tax_id_test.rb
-- test/stripe/tax_rate_test.rb
-- test/stripe/terminal/connection_token_test.rb
-- test/stripe/terminal/location_test.rb
-- test/stripe/terminal/reader_test.rb
-- test/stripe/three_d_secure_test.rb
-- test/stripe/topup_test.rb
-- test/stripe/transfer_test.rb
-- test/stripe/usage_record_summary_test.rb
-- test/stripe/usage_record_test.rb
-- test/stripe/util_test.rb
-- test/stripe/webhook_endpoint_test.rb
-- test/stripe/webhook_test.rb
-- test/stripe_mock.rb
-- test/stripe_test.rb
-- test/test_data.rb
-- test/test_helper.rb
+test_files: []