Conservancy/website
6
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

supporters: Document "restricted API key" required permissions

Browse source
This commit is contained in:
Ben Sturmfels 2024-11-15 21:03:30 +11:00
parent 99698c388f
commit c83b6404e0
Signed by: bsturmfels
GPG key ID: 023C05E2C9C068F0
1 changed files with 3 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
conservancy/supporters/views.py
View file

@ -195,6 +195,9 @@ def sustainers_stripe(request):
return render(request, 'supporters/sustainers_stripe.html', {'form': form})
# Use a "restricted" API key and grant access to:
# - checkout sessions (write)
# - credit notes (read) - unclear why, subscription sign-ups fail otherwise
stripe.api_key = settings.STRIPE_API_KEY
if stripe.api_key == '':
logger.warning('Missing STRIPE_API_KEY')