Stripe POST — curlwtf

💳

Stripe

POSThttps://api.stripe.com/v1/charges

docs ↗

!Action required1 finding

Leaked credentials. The command contains a redacted API key. Ensure that this key is stored securely and not exposed in public code repositories.

What this does

Creates a new charge on Stripe.

Flag by flag

-u [REDACTED]:Basic auth
Authenticates using a secret API key.
-d amount=2000Charge amount
Sets the charge amount to 2000 cents.
-d currency=usdCurrency type
Specifies the currency for the charge.
-d source=tok_visaPayment source
Defines the source of the payment.

Same call, other languages

Python · requests

import requests

response = requests.post(class="c-str">'https:class="c-com">//api.stripe.com/v1/charges',
    auth=(os.environ[class="c-str">'STRIPE_API_KEY'], class="c-str">''),
    data={class="c-str">'amount': class="c-num">2000, class="c-str">'currency': class="c-str">'usd', class="c-str">'source': class="c-str">'tok_visa'})

Likely response

200 OKresponse · approximate shape

Headers

Request-Id: req_test_id
Content-Type: application/json

Body

{
  "id": "ch_test_charge",
  "amount": 2000,
  "status": "succeeded",
  "currency": "usd",
  "payment_method": "pm_test_card"
}