coracle/caravel
1
1
Fork 2
Code Issues 4 Pull Requests Actions Packages Projects Releases Wiki Activity

fix: make stripe webhooks explicitly toggleable with mandatory secret validation

Browse Source
This commit is contained in:
Aditya Chaudhary
2026-04-17 19:13:16 +05:45
parent 334f05783f
commit 5a9022bffc
11 changed files with 238 additions and 42 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/.env.template
+3 -2
View File
@@ -28,5 +28,6 @@ LIVEKIT_API_SECRET=
# Billing
NWC_URL= # Nostr Wallet Connect URL for generating Lightning invoices
STRIPE_SECRET_KEY= # Stripe API secret key (sk_...)
STRIPE_WEBHOOK_SECRET= # Secret for verifying Stripe webhook signatures (whsec_...)
STRIPE_SECRET_KEY= # Required Stripe API secret key (sk_...)
STRIPE_WEBHOOKS_ENABLED=false # Local-friendly default; set true to enable Stripe webhooks and require STRIPE_WEBHOOK_SECRET
STRIPE_WEBHOOK_SECRET= # Required webhook signing secret when STRIPE_WEBHOOKS_ENABLED=true (whsec_...)