
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@stripe/connect-js
Advanced tools
The Connect.js library and its supporting API allows you to add connected account dashboard functionality to your website. This NPM package contains initialization logic for Connect embedded components along with related types.
Calling loadConnectAndInitialize
always loads the latest version of Connect.js, regardless of which version of @stripe/connect-js
you use. Updates for this package only impact tooling around the loadConnectAndInitialize
helper itself and the TypeScript type definitions provided for Connect.js. Updates do not affect runtime availability of features of Connect.js.
The embedded onboarding component is generally available now. Please refer to our documentation for more information.
Note: Some Connect embedded components are currently still in preview. These can be viewed on our doc site, where you can also request preview access.
Use npm
to install the Connect.js module:
npm install @stripe/connect-js
loadConnectAndInitialize
This synchronous function takes in a publishable key, a function to retrieve the client secret returned from the Account Session API, and other initialization parameters. It returns a StripeConnectInstance
. If necessary, it will load Connect.js for you by inserting the Connect.js script tag.
import { loadConnectAndInitialize } from "@stripe/connect-js";
const fetchClientSecret = async () => {
// Fetch the AccountSession client secret by making an API call to your service
};
const instance = loadConnectAndInitialize({
publishableKey: "{{pk test123}}",
fetchClientSecret: fetchClientSecret
});
We’ve placed a random API key in this example. Replace it with your actual publishable API keys to test this code through your Connect account.
If you have deployed a Content Security Policy, make sure to include Connect.js in your directives.
Import @stripe/connect-js
as a side effect in code that will be included
throughout your site (e.g. your root module). This will make sure the Connect.js
script tag is inserted immediately upon page load.
import "@stripe/connect-js";
loadConnectAndInitialize
without side effectsIf you would like to use loadConnectAndInitialize
in your application, but defer loading the
Connect.js script until loadConnectAndInitialize
is first called, use the alternative
@stripe/connect-js/pure
import path:
import { loadConnectAndInitialize } from "@stripe/connect-js/pure";
// Connect.js will not be loaded until `loadConnect` is called
const instance = loadConnectAndInitialize({
publishableKey: "{{pk test123}}",
fetchClientSecret: fetchClientSecret
});
FAQs
Connect.js loading utility package
We found that @stripe/connect-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.