从StripeWebhook更新Parse.com用户-UpdateParse.comUserfromStripeWebhook

6  

Ok after some experimenting:

经过一些实验后确定:

1. create a webhook on in the Stripe Accounts area using the URL: https://**APPLICATION_ID**:Javascript-key=**Javascript_KEY**@api.parse.com/1/functions/update_user

   使用以下URL在Stripe Accounts区域中创建webhook:https:// ** APPLICATION_ID **:Javascript-key=**Javascript_KEY**@api.parse.com/1/functions/update_user

2. In your cloud code use the same function name as the final part of your URL. in my case update_user.

   在您的云代码中,使用与URL最后部分相同的函数名称。在我的情况下update_user。

3. Create a test version of the webhook and place this in your cloud code for testing :

   创建webhook的测试版本并将其放在您的云代码中进行测试:

Parse.Cloud.define("update_user", function(request, response) { response.success('** WEBHOOK WORKING **' + request); });

Parse.Cloud.define(“update_user”,function(request,response){response.success('** WEBHOOK WORKING **'+ request);});

When running the test in the stripe dashboard you should see:

在条带仪表板中运行测试时,您应该看到:

Hope that this helps someone - Would be grateful of any input anyone has as to my implementation or a slick function to run on my User class update.

希望这有助于某人 - 感谢任何人对我的实现所做的任何输入或者在我的User类更新上运行的光滑功能。

1  

Mostly I think your solution will work.

我认为你的解决方案大多数都可以。

I think using the Javascript key could pose a security risk if you are not validating events that come from stripe.

我认为如果您没有验证来自条带的事件,使用Javascript密钥可能会带来安全风险。

Your Javascript keys will be present in your web site. Someone could get it and call your cloud code function. I'd use the master key so you know its only from sources you trust. They might be able change important billing information.

您的Javascript密钥将出现在您的网站上。有人可以得到它并调用您的云代码功能。我会使用主密钥,因此您只能从您信任的来源获知它。他们可能会更改重要的结算信息。

In your cloud function definition you can check if the master key was used.

在您的云功能定义中,您可以检查是否使用了主密钥。

Parse.Cloud.define('stripeEvents', function (request, response) {
if (request.master){
    return response.success('stripeEvents - master');
}
response.error('stripeEvents - must use master key');});