[crocker]

What are they used for and how can they be used?

[Aanya]

you can validate the key by :

curl https://api.stripe.com/v1/charges -u token_here:

Keep the colon at the end of the token to prevent cURL from requesting a password.

The token is always in the following format: sk_live_24charshere, where the 24charshere part contains 24 characters from a-z A-Z 0-9. There is also a test key, which starts with sk_test, but this key is worthless since it is only used for testing purposes and most likely doesn't contain any sensitive information. The live key, on the other hand, can be used to extract/retrieve a lot of info — ranging from charges to the complete product list.

Keep in mind that you will never be able to get the full credit card information since Stripe only gives you the last 4 digits.

More info/complete documentation: https://stripe.com/docs/api/authentication.

[crocker]

you can validate the key by :

curl https://api.stripe.com/v1/charges -u token_here:

Keep the colon at the end of the token to prevent cURL from requesting a password.

The token is always in the following format: sk_live_24charshere, where the 24charshere part contains 24 characters from a-z A-Z 0-9. There is also a test key, which starts with sk_test, but this key is worthless since it is only used for testing purposes and most likely doesn't contain any sensitive information. The live key, on the other hand, can be used to extract/retrieve a lot of info — ranging from charges to the complete product list.

Keep in mind that you will never be able to get the full credit card information since Stripe only gives you the last 4 digits.

More info/complete documentation: https://stripe.com/docs/api/authentication.

Thanks for the answer, but I wanted to know something more specific than the first link on google. Except for the fact that you cannot get CC, but only 4 digits
What are the vectors for using a live secret token?

[Aanya]

You could have been a little more polite and i would have helped you more . Good luck dear

[DredgenSun]

You could have been a little more polite and i would have helped you more . Good luck dear

Manners literally cost nothing amirite?

[crocker]

You could have been a little more polite and i would have helped you more . Good luck dear 

The question was asked but instead of a valid answer you send link from the google???. When I pointed out that instead of help you just set -rep and pretend "i'm too c00l h4ck3r for that", but snot and tears instantly flowed. What is the point of this? Why do you cry?

[Aanya]

You are absolutely right  @DredgenSun  but  almost 8000 posts.... wowwww . . your post  felt like gandalf talking to  baggins  your awesome .

[crocker]

You could have been a little more polite and i would have helped you more . Good luck dear 

Manners literally cost nothing amirite?

Thread was created and first link from google was given, as I actually pointed without any insults. Now, to get more replies, the new reply followed with drool dripping on your crotch. Isn't it disgusting to write such shit yourself?

[DredgenSun]

You could have been a little more polite and i would have helped you more . Good luck dear 

Manners literally cost nothing amirite?

Thread was created and first link from google was given, as I actually pointed without any insults. Now, to get more replies, the new reply followed with drool dripping on your crotch. Isn't it disgusting to write such shit yourself?

I'm actually a bit confused here...

---

You are absolutely right  @DredgenSun  but  almost 8000 posts.... wowwww . . your post  felt like gandalf talking to  baggins  your awesome .

Ahaha! Yeah, you could say I'm 'Terminally online'