#zsmorgan21

1 messages · Page 1 of 1 (latest)

jolly elmBOT
lone nymph
#

Stripe.js is for mostly used for client-side interactions like payment method tokenization etc. It uses the publishable key which is exposed widely.

Plan/Price/Product objects are mainly used server-side allowing developers to customize their product catalogue the way they want. These interactions via server-side use the secret API key.

Opening up these objects to client-side SDK (which relies on publishable key) could open up some security concerns IMO.