mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-20 22:42:53 -05:00
5f808dfbee
no-issue The service at stripe.ghost.org must know which client_secret to use, either the test, or live one. By encoding a JSON object as the state we are able to pass data through the flow to inform this decision at the end. Note, that we still keep a random value in the state to protect against CSRF attacks. |
||
---|---|---|
.. | ||
client@5342800d10 | ||
frontend | ||
server | ||
shared | ||
index.js |