#zsmorgan21
1 messages · Page 1 of 1 (latest)
Stripe.js is for mostly used for client-side interactions like payment method tokenization etc. It uses the publishable key which is exposed widely.
Plan/Price/Product objects are mainly used server-side allowing developers to customize their product catalogue the way they want. These interactions via server-side use the secret API key.
Opening up these objects to client-side SDK (which relies on publishable key) could open up some security concerns IMO.