stripe 9.4.0.pre.beta.3 → 9.4.1

data/lib/stripe/stripe_client.rb

@@ -212,10 +212,9 @@ module Stripe
     end
 
     def execute_request(method, path,
-                        api_base: nil, api_key: nil,
-                        headers: {}, params: {}, api_mode: nil)
+                        api_base: nil, api_key: nil, headers: {}, params: {})
       http_resp, api_key = execute_request_internal(
-        method, path, api_base, api_key, headers, params, api_mode
+        method, path, api_base, api_key, headers, params
       )
 
       begin
@@ -246,7 +245,6 @@ module Stripe
     def execute_request_stream(method, path,
                                api_base: nil, api_key: nil,
                                headers: {}, params: {},
-                               api_mode: nil,
                                &read_body_chunk_block)
       unless block_given?
         raise ArgumentError,
@@ -254,8 +252,7 @@ module Stripe
       end
 
       http_resp, api_key = execute_request_internal(
-        method, path, api_base, api_key,
-        headers, params, api_mode, &read_body_chunk_block
+        method, path, api_base, api_key, headers, params, &read_body_chunk_block
       )
 
       # When the read_body_chunk_block is given, we no longer have access to the
@@ -435,7 +432,7 @@ module Stripe
 
     private def execute_request_internal(method, path,
                                          api_base, api_key, headers, params,
-                                         api_mode, &read_body_chunk_block)
+                                         &read_body_chunk_block)
       raise ArgumentError, "method should be a symbol" \
       unless method.is_a?(Symbol)
       raise ArgumentError, "path should be a string" \
@@ -443,10 +440,9 @@ module Stripe
 
       api_base ||= config.api_base
       api_key ||= config.api_key
-      authenticator ||= config.authenticator
       params = Util.objects_to_ids(params)
 
-      check_keys!(api_key, authenticator)
+      check_api_key!(api_key)
 
       body_params = nil
       query_params = nil
@@ -459,9 +455,8 @@ module Stripe
 
       query_params, path = merge_query_params(query_params, path)
 
-      headers = request_headers(api_key, method, api_mode)
+      headers = request_headers(api_key, method)
                 .update(Util.normalize_headers(headers))
-
       url = api_url(path, api_base)
 
       # Merge given query parameters with any already encoded in the path.
@@ -472,16 +467,13 @@ module Stripe
       # a log-friendly variant of the encoded form. File objects are displayed
       # as such instead of as their file contents.
       body, body_log =
-        body_params ? encode_body(body_params, headers, api_mode) : [nil, nil]
-
-      authenticator.authenticate(method, headers, body) unless api_key
+        body_params ? encode_body(body_params, headers) : [nil, nil]
 
       # stores information on the request we're about to make so that we don't
       # have to pass as many parameters around for logging.
       context = RequestLogContext.new
       context.account         = headers["Stripe-Account"]
       context.api_key         = api_key
-      context.authenticator   = authenticator
       context.api_version     = headers["Stripe-Version"]
       context.body            = body_log
       context.idempotency_key = headers["Idempotency-Key"]
@@ -520,16 +512,8 @@ module Stripe
       (api_base || config.api_base) + url
     end
 
-    private def check_keys!(api_key, authenticator)
-      if api_key && authenticator
-        raise AuthenticationError, "Can't specify both API key " \
-          "and authenticator. Either set your API key" \
-          'using "Stripe.api_key = <API-KEY>", or set your authenticator ' \
-          'using "Stripe.authenticator = <AUTHENTICATOR>"' \
-      end
-
-      unless api_key || authenticator
-        # Default to missing API key error message for general users.
+    private def check_api_key!(api_key)
+      unless api_key
         raise AuthenticationError, "No API key provided. " \
           'Set your API key using "Stripe.api_key = <API-KEY>". ' \
           "You can generate API keys from the Stripe web interface. " \
@@ -548,7 +532,7 @@ module Stripe
     # Encodes a set of body parameters using multipart if `Content-Type` is set
     # for that, or standard form-encoding otherwise. Returns the encoded body
     # and a version of the encoded body that's safe to be logged.
-    private def encode_body(body_params, headers, api_mode)
+    private def encode_body(body_params, headers)
       body = nil
       flattened_params = Util.flatten_params(body_params)
 
@@ -564,22 +548,15 @@ module Stripe
         flattened_params =
           flattened_params.map { |k, v| [k, v.is_a?(String) ? v : v.to_s] }.to_h
 
-      elsif api_mode == :preview
-        body = JSON.generate(body_params)
-        headers["Content-Type"] = "application/json"
       else
         body = Util.encode_parameters(body_params)
       end
 
-      if api_mode == :preview
-        body_log = body
-      else
-        # We don't use `Util.encode_parameters` partly as an optimization (to
-        # not redo work we've already done), and partly because the encoded
-        # forms of certain characters introduce a lot of visual noise and it's
-        # nice to have a clearer format for logs.
-        body_log = flattened_params.map { |k, v| "#{k}=#{v}" }.join("&")
-      end
+      # We don't use `Util.encode_parameters` partly as an optimization (to not
+      # redo work we've already done), and partly because the encoded forms of
+      # certain characters introduce a lot of visual noise and it's nice to
+      # have a clearer format for logs.
+      body_log = flattened_params.map { |k, v| "#{k}=#{v}" }.join("&")
 
       [body, body_log]
     end
@@ -768,11 +745,10 @@ module Stripe
     end
 
     private def specific_api_error(resp, error_data, context)
-      message = error_data[:message]
       Util.log_error("Stripe API error",
                      status: resp.http_status,
                      error_code: error_data[:code],
-                     error_message: message,
+                     error_message: error_data[:message],
                      error_param: error_data[:param],
                      error_type: error_data[:type],
                      idempotency_key: context.idempotency_key,
@@ -793,26 +769,26 @@ module Stripe
       when 400, 404
         case error_data[:type]
         when "idempotency_error"
-          IdempotencyError.new(message, **opts)
+          IdempotencyError.new(error_data[:message], **opts)
         else
           InvalidRequestError.new(
-            message, error_data[:param],
+            error_data[:message], error_data[:param],
             **opts
           )
         end
       when 401
-        AuthenticationError.new(message, **opts)
+        AuthenticationError.new(error_data[:message], **opts)
       when 402
         CardError.new(
-          message, error_data[:param],
+          error_data[:message], error_data[:param],
           **opts
         )
       when 403
-        PermissionError.new(message, **opts)
+        PermissionError.new(error_data[:message], **opts)
       when 429
-        RateLimitError.new(message, **opts)
+        RateLimitError.new(error_data[:message], **opts)
       else
-        APIError.new(message, **opts)
+        APIError.new(error_data[:message], **opts)
       end
     end
 
@@ -880,7 +856,7 @@ module Stripe
             message + "\n\n(Network error: #{error.message})"
     end
 
-    private def request_headers(api_key, method, api_mode)
+    private def request_headers(api_key, method)
       user_agent = "Stripe/v1 RubyBindings/#{Stripe::VERSION}"
       unless Stripe.app_info.nil?
         user_agent += " " + format_app_info(Stripe.app_info)
@@ -889,13 +865,9 @@ module Stripe
       headers = {
         "User-Agent" => user_agent,
         "Authorization" => "Bearer #{api_key}",
+        "Content-Type" => "application/x-www-form-urlencoded",
       }
 
-      if api_mode != :preview
-        # TODO: (major) don't set Content-Type if method is not post
-        headers["Content-Type"] = "application/x-www-form-urlencoded"
-      end
-
       if config.enable_telemetry? && !@last_request_metrics.nil?
         headers["X-Stripe-Client-Telemetry"] = JSON.generate(
           last_request_metrics: @last_request_metrics.payload
@@ -908,12 +880,7 @@ module Stripe
         headers["Idempotency-Key"] ||= SecureRandom.uuid
       end
 
-      if api_mode == :preview
-        headers["Stripe-Version"] = ApiVersion::PREVIEW
-      elsif config.api_version
-        headers["Stripe-Version"] = config.api_version
-      end
-
+      headers["Stripe-Version"] = config.api_version if config.api_version
       headers["Stripe-Account"] = config.stripe_account if config.stripe_account
 
       user_agent = @system_profiler.user_agent
@@ -999,7 +966,6 @@ module Stripe
       attr_accessor :body
       attr_accessor :account
       attr_accessor :api_key
-      attr_accessor :authenticator
       attr_accessor :api_version
       attr_accessor :idempotency_key
       attr_accessor :method

data/lib/stripe/stripe_configuration.rb

@@ -27,7 +27,6 @@ module Stripe
   class StripeConfiguration
     attr_accessor :api_key
     attr_accessor :api_version
-    attr_accessor :authenticator
     attr_accessor :client_id
     attr_accessor :enable_telemetry
     attr_accessor :logger
@@ -65,7 +64,6 @@ module Stripe
 
     def initialize
       @api_version = ApiVersion::CURRENT
-
       @ca_bundle_path = Stripe::DEFAULT_CA_BUNDLE_PATH
       @enable_telemetry = true
       @verify_ssl_certs = true

data/lib/stripe/util.rb

@@ -7,7 +7,6 @@ module Stripe
     # Options that a user is allowed to specify.
     OPTS_USER_SPECIFIED = Set[
       :api_key,
-      :authenticator,
       :idempotency_key,
       :stripe_account,
       :stripe_version
@@ -282,13 +281,7 @@ module Stripe
       when String
         { api_key: opts }
       when Hash
-        # If the user is using request signing for authentication,
-        # no need to check the api_key per request.
-        if !(opts.key?(:client) &&
-           opts.fetch(:client).config.authenticator) &&
-           opts.key?(:api_key)
-          check_api_key!(opts.fetch(:api_key))
-        end
+        check_api_key!(opts.fetch(:api_key)) if opts.key?(:api_key)
         # Explicitly use dup here instead of clone to avoid preserving freeze
         # state on input params.
         opts.dup

data/lib/stripe/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module Stripe
-  VERSION = "9.4.0-beta.3"
+  VERSION = "9.4.1"
 end

data/lib/stripe.rb

@@ -13,7 +13,6 @@ require "set"
 require "socket"
 require "uri"
 require "forwardable"
-require "base64"
 
 # Version
 require "stripe/api_version"
@@ -45,7 +44,6 @@ require "stripe/api_resource_test_helpers"
 require "stripe/singleton_api_resource"
 require "stripe/webhook"
 require "stripe/stripe_configuration"
-require "stripe/request_signing_authenticator"
 
 # Named API resources
 require "stripe/resources"
@@ -72,7 +70,6 @@ module Stripe
 
     # User configurable options
     def_delegators :@config, :api_key, :api_key=
-    def_delegators :@config, :authenticator, :authenticator=
     def_delegators :@config, :api_version, :api_version=
     def_delegators :@config, :stripe_account, :stripe_account=
     def_delegators :@config, :api_base, :api_base=
@@ -119,49 +116,6 @@ module Stripe
       version: version,
     }
   end
-
-  class Preview
-    def self._get_default_opts(opts)
-      { api_mode: :preview }.merge(opts)
-    end
-
-    def self.get(url, opts = {})
-      Stripe.raw_request(:get, url, {}, _get_default_opts(opts))
-    end
-
-    def self.post(url, params = {}, opts = {})
-      Stripe.raw_request(:post, url, params, _get_default_opts(opts))
-    end
-
-    def self.delete(url, opts = {})
-      Stripe.raw_request(:delete, url, {}, _get_default_opts(opts))
-    end
-  end
-
-  class RawRequest
-    include Stripe::APIOperations::Request
-
-    def initialize
-      @opts = {}
-    end
-
-    def execute(method, url, params = {}, opts = {})
-      resp, = execute_resource_request(method, url, params, opts)
-
-      resp
-    end
-  end
-
-  # Sends a request to Stripe REST API
-  def self.raw_request(method, url, params = {}, opts = {})
-    req = RawRequest.new
-    req.execute(method, url, params, opts)
-  end
-
-  def self.deserialize(data)
-    data = JSON.parse(data) if data.is_a?(String)
-    Util.convert_to_stripe_object(data, {})
-  end
 end
 
 Stripe.log_level = ENV["STRIPE_LOG"] unless ENV["STRIPE_LOG"].nil?

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: stripe
 version: !ruby/object:Gem::Version
-  version: 9.4.0.pre.beta.3
+  version: 9.4.1
 platform: ruby
 authors:
 - Stripe
-autorequire: 
+autorequire:
 bindir: bin
 cert_chain: []
-date: 2023-09-29 00:00:00.000000000 Z
+date: 2026-10-23 00:00:00.000000000 Z
 dependencies: []
 description: Stripe is the easiest way to accept payments online.  See https://stripe.com
   for details.
@@ -50,7 +50,6 @@ files:
 - lib/stripe/multipart_encoder.rb
 - lib/stripe/oauth.rb
 - lib/stripe/object_types.rb
-- lib/stripe/request_signing_authenticator.rb
 - lib/stripe/resources.rb
 - lib/stripe/resources/account.rb
 - lib/stripe/resources/account_link.rb
@@ -66,14 +65,10 @@ files:
 - lib/stripe/resources/billing_portal/configuration.rb
 - lib/stripe/resources/billing_portal/session.rb
 - lib/stripe/resources/capability.rb
-- lib/stripe/resources/capital/financing_offer.rb
-- lib/stripe/resources/capital/financing_summary.rb
-- lib/stripe/resources/capital/financing_transaction.rb
 - lib/stripe/resources/card.rb
 - lib/stripe/resources/cash_balance.rb
 - lib/stripe/resources/charge.rb
 - lib/stripe/resources/checkout/session.rb
-- lib/stripe/resources/confirmation_token.rb
 - lib/stripe/resources/country_spec.rb
 - lib/stripe/resources/coupon.rb
 - lib/stripe/resources/credit_note.rb
@@ -81,7 +76,6 @@ files:
 - lib/stripe/resources/customer.rb
 - lib/stripe/resources/customer_balance_transaction.rb
 - lib/stripe/resources/customer_cash_balance_transaction.rb
-- lib/stripe/resources/customer_session.rb
 - lib/stripe/resources/discount.rb
 - lib/stripe/resources/dispute.rb
 - lib/stripe/resources/ephemeral_key.rb
@@ -92,12 +86,8 @@ files:
 - lib/stripe/resources/financial_connections/account.rb
 - lib/stripe/resources/financial_connections/account_owner.rb
 - lib/stripe/resources/financial_connections/account_ownership.rb
-- lib/stripe/resources/financial_connections/inferred_balance.rb
 - lib/stripe/resources/financial_connections/session.rb
-- lib/stripe/resources/financial_connections/transaction.rb
 - lib/stripe/resources/funding_instructions.rb
-- lib/stripe/resources/gift_cards/card.rb
-- lib/stripe/resources/gift_cards/transaction.rb
 - lib/stripe/resources/identity/verification_report.rb
 - lib/stripe/resources/identity/verification_session.rb
 - lib/stripe/resources/invoice.rb
@@ -107,13 +97,11 @@ files:
 - lib/stripe/resources/issuing/card.rb
 - lib/stripe/resources/issuing/cardholder.rb
 - lib/stripe/resources/issuing/dispute.rb
-- lib/stripe/resources/issuing/personalization_design.rb
-- lib/stripe/resources/issuing/physical_bundle.rb
+- lib/stripe/resources/issuing/token.rb
 - lib/stripe/resources/issuing/transaction.rb
 - lib/stripe/resources/line_item.rb
 - lib/stripe/resources/login_link.rb
 - lib/stripe/resources/mandate.rb
-- lib/stripe/resources/order.rb
 - lib/stripe/resources/payment_intent.rb
 - lib/stripe/resources/payment_link.rb
 - lib/stripe/resources/payment_method.rb
@@ -126,9 +114,6 @@ files:
 - lib/stripe/resources/product.rb
 - lib/stripe/resources/promotion_code.rb
 - lib/stripe/resources/quote.rb
-- lib/stripe/resources/quote_phase.rb
-- lib/stripe/resources/quote_preview_invoice.rb
-- lib/stripe/resources/quote_preview_schedule.rb
 - lib/stripe/resources/radar/early_fraud_warning.rb
 - lib/stripe/resources/radar/value_list.rb
 - lib/stripe/resources/radar/value_list_item.rb
@@ -149,8 +134,6 @@ files:
 - lib/stripe/resources/subscription_schedule.rb
 - lib/stripe/resources/tax/calculation.rb
 - lib/stripe/resources/tax/calculation_line_item.rb
-- lib/stripe/resources/tax/form.rb
-- lib/stripe/resources/tax/registration.rb
 - lib/stripe/resources/tax/settings.rb
 - lib/stripe/resources/tax/transaction.rb
 - lib/stripe/resources/tax/transaction_line_item.rb
@@ -199,7 +182,7 @@ metadata:
   github_repo: ssh://github.com/stripe/stripe-ruby
   homepage_uri: https://stripe.com/docs/api?lang=ruby
   source_code_uri: https://github.com/stripe/stripe-ruby
-post_install_message: 
+post_install_message:
 rdoc_options: []
 require_paths:
 - lib
@@ -210,12 +193,12 @@ required_ruby_version: !ruby/object:Gem::Requirement
       version: 2.3.0
 required_rubygems_version: !ruby/object:Gem::Requirement
   requirements:
-  - - ">"
+  - - ">="
     - !ruby/object:Gem::Version
-      version: 1.3.1
+      version: '0'
 requirements: []
-rubygems_version: 3.3.26
-signing_key: 
+rubygems_version: 3.3.27
+signing_key:
 specification_version: 4
 summary: Ruby bindings for the Stripe API
 test_files: []

data/lib/stripe/request_signing_authenticator.rb

@@ -1,83 +0,0 @@
-# frozen_string_literal: true
-
-module Stripe
-  class RequestSigningAuthenticator
-    AUTHORIZATION_HEADER_NAME = "Authorization"
-    CONTENT_TYPE_HEADER_NAME = "Content-Type"
-    STRIPE_CONTEXT_HEADER_NAME = "Stripe-Context"
-    STRIPE_ACCOUNT_HEADER_NAME = "Stripe-Account"
-    CONTENT_DIGEST_HEADER_NAME = "Content-Digest"
-    SIGNATURE_INPUT_HEADER_NAME = "Signature-Input"
-    SIGNATURE_HEADER_NAME = "Signature"
-
-    attr_reader :auth_token, :sign_lambda
-
-    def initialize(auth_token, sign_lambda)
-      unless auth_token.is_a?(String)
-        raise ArgumentError, "auth_token must be a string"
-      end
-      unless sign_lambda.is_a?(Proc)
-        raise ArgumentError, "sign_lambda must be a lambda"
-      end
-
-      @auth_token = auth_token
-      @sign_lambda = sign_lambda
-    end
-
-    def authenticate(method, headers, body)
-      covered_headers = [CONTENT_TYPE_HEADER_NAME,
-                         CONTENT_DIGEST_HEADER_NAME,
-                         STRIPE_CONTEXT_HEADER_NAME,
-                         STRIPE_ACCOUNT_HEADER_NAME,
-                         AUTHORIZATION_HEADER_NAME,]
-
-      headers[AUTHORIZATION_HEADER_NAME] = "STRIPE-V2-SIG #{auth_token}"
-
-      if method == :get
-        covered_headers -= [CONTENT_TYPE_HEADER_NAME,
-                            CONTENT_DIGEST_HEADER_NAME,]
-      else
-        content = body || ""
-        headers[CONTENT_DIGEST_HEADER_NAME] =
-          %(sha-256=:#{content_digest(content)}:)
-      end
-
-      covered_headers_formatted = covered_headers
-                                  .map { |string| %("#{string.downcase}") }
-                                  .join(" ")
-
-      signature_input = "(#{covered_headers_formatted});created=#{created_time}"
-
-      inputs = covered_headers
-               .map { |header| %("#{header.downcase}": #{headers[header]}) }
-               .join("\n")
-
-      signature_base = %(#{inputs}\n"@signature-params": #{signature_input})
-                       .encode(Encoding::UTF_8)
-
-      headers[SIGNATURE_INPUT_HEADER_NAME] = "sig1=#{signature_input}"
-
-      headers[SIGNATURE_HEADER_NAME] =
-        "sig1=:#{encoded_signature(signature_base)}:"
-    end
-
-    private def sign(signature_base)
-      @sign_lambda.call(signature_base)
-    end
-
-    private def encoded_signature(signature_base)
-      Base64.strict_encode64(sign(signature_base))
-    rescue StandardError
-      raise AuthenticationError, "Encountered '#{e.message} (#{e.class})' "\
-       "when calculating request signature."
-    end
-
-    private def content_digest(content)
-      Base64.strict_encode64(OpenSSL::Digest.new("SHA256").digest(content))
-    end
-
-    private def created_time
-      Time.now.to_i
-    end
-  end
-end

data/lib/stripe/resources/capital/financing_offer.rb

@@ -1,32 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  module Capital
-    # This is an object representing an offer of financing from
-    # Stripe Capital to a Connect subaccount.
-    class FinancingOffer < APIResource
-      extend Stripe::APIOperations::List
-
-      OBJECT_NAME = "capital.financing_offer"
-
-      def mark_delivered(params = {}, opts = {})
-        request_stripe_object(
-          method: :post,
-          path: format("/v1/capital/financing_offers/%<financing_offer>s/mark_delivered", { financing_offer: CGI.escape(self["id"]) }),
-          params: params,
-          opts: opts
-        )
-      end
-
-      def self.mark_delivered(financing_offer, params = {}, opts = {})
-        request_stripe_object(
-          method: :post,
-          path: format("/v1/capital/financing_offers/%<financing_offer>s/mark_delivered", { financing_offer: CGI.escape(financing_offer) }),
-          params: params,
-          opts: opts
-        )
-      end
-    end
-  end
-end

data/lib/stripe/resources/capital/financing_summary.rb

@@ -1,12 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  module Capital
-    # A financing object describes an account's current financing state. Used by Connect
-    # platforms to read the state of Capital offered to their connected accounts.
-    class FinancingSummary < SingletonAPIResource
-      OBJECT_NAME = "capital.financing_summary"
-    end
-  end
-end

data/lib/stripe/resources/capital/financing_transaction.rb

@@ -1,13 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  module Capital
-    # This is an object representing the details of a transaction on a Capital financing object.
-    class FinancingTransaction < APIResource
-      extend Stripe::APIOperations::List
-
-      OBJECT_NAME = "capital.financing_transaction"
-    end
-  end
-end

data/lib/stripe/resources/confirmation_token.rb

@@ -1,11 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  # ConfirmationTokens help transport client side data collected by Stripe JS over
-  # to your server for confirming a PaymentIntent or SetupIntent. If the confirmation
-  # is successful, values present on the ConfirmationToken are written onto the Intent.
-  class ConfirmationToken < APIResource
-    OBJECT_NAME = "confirmation_token"
-  end
-end

data/lib/stripe/resources/customer_session.rb

@@ -1,12 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  # A customer session allows you to grant client access to Stripe's frontend SDKs (like StripeJs)
-  # control over a customer.
-  class CustomerSession < APIResource
-    extend Stripe::APIOperations::Create
-
-    OBJECT_NAME = "customer_session"
-  end
-end

data/lib/stripe/resources/financial_connections/inferred_balance.rb

@@ -1,13 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  module FinancialConnections
-    # A historical balance for the account on a particular day. It may be sourced from a balance snapshot provided by a financial institution, or inferred using transactions data.
-    class InferredBalance < APIResource
-      extend Stripe::APIOperations::List
-
-      OBJECT_NAME = "financial_connections.account_inferred_balance"
-    end
-  end
-end

data/lib/stripe/resources/financial_connections/transaction.rb

@@ -1,13 +0,0 @@
-# File generated from our OpenAPI spec
-# frozen_string_literal: true
-
-module Stripe
-  module FinancialConnections
-    # A Transaction represents a real transaction that affects a Financial Connections Account balance.
-    class Transaction < APIResource
-      extend Stripe::APIOperations::List
-
-      OBJECT_NAME = "financial_connections.transaction"
-    end
-  end
-end