Ghost/core/server/services/members/stripe-connect.js
Fabien O'Carroll 5f808dfbee Encoded the mode in the Stripe Connect OAuth state
no-issue

The service at stripe.ghost.org must know which client_secret to use,
either the test, or live one. By encoding a JSON object as the state we
are able to pass data through the flow to inform this decision at the
end.

Note, that we still keep a random value in the state to protect against
CSRF attacks.
2020-06-10 14:06:57 +02:00

73 lines
2.3 KiB
JavaScript

const {Buffer} = require('buffer');
const {randomBytes} = require('crypto');
const {URL} = require('url');
const STATE_PROP = 'stripe-connect-state';
const liveClientID = 'ca_8LBuZWhYshxF0A55KgCXu8PRTquCKC5x';
const testClientID = 'ca_8LBum4Ctv3mmJ1oD0ZRmxjdAhNrrBUy3';
const redirectURI = 'https://stripe.ghost.org';
/**
* @function getStripeConnectOAuthUrl
* @desc Returns a url for the auth endpoint for Stripe Connect, generates state and stores it on the session.
*
* @param {(prop: string, val: any) => Promise<void>} setSessionProp - A function to set data on the current session
* @param {'live' | 'test'} mode - Which stripe mode to set up
*
* @returns {Promise<URL>}
*/
async function getStripeConnectOAuthUrl(setSessionProp, mode = 'live') {
const randomState = randomBytes(16).toString('hex');
const state = Buffer.from(JSON.stringify({
mode,
randomState
})).toString('base64');
await setSessionProp(STATE_PROP, state);
const clientID = mode === 'live' ? liveClientID : testClientID;
const authUrl = new URL('https://connect.stripe.com/oauth/authorize');
authUrl.searchParams.set('response_type', 'code');
authUrl.searchParams.set('scope', 'read_write');
authUrl.searchParams.set('client_id', clientID);
authUrl.searchParams.set('redirect_uri', redirectURI);
authUrl.searchParams.set('state', state);
return authUrl;
}
/**
* @function getStripeConnectTokenData
* @desc Returns the api keys and the livemode for a Stripe Connect integration after validating the state.
*
* @param {string} encodedData - A string encoding the response from Stripe Connect
* @param {(prop: string) => Promise<any>} getSessionProp - A function to retrieve data from the current session
*
* @returns {Promise<{secret_key: string, public_key: string, livemode: boolean}>}
*/
async function getStripeConnectTokenData(encodedData, getSessionProp) {
const data = JSON.parse(Buffer.from(encodedData, 'base64').toString());
const state = await getSessionProp(STATE_PROP);
if (state !== data.s) {
throw new Error('State did not match');
}
return {
public_key: data.p,
secret_key: data.a,
livemode: data.l,
display_name: data.n,
account_id: data.i
};
}
module.exports = {
getStripeConnectOAuthUrl,
getStripeConnectTokenData,
STATE_PROP
};