Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
braintree
Advanced tools
The Braintree Node library provides integration access to the Braintree Gateway.
The Payment Card Industry (PCI) Council has mandated that early versions of TLS be retired from service. All organizations that handle credit card information are required to comply with this standard. As part of this obligation, Braintree is updating its services to require TLS 1.2 for all HTTPS connections. Braintree will also require HTTP/1.1 for all connections. Please see our technical documentation for more information.
npm install braintree
var braintree = require('braintree')
Braintree employs a deprecation policy for our SDKs. For more information on the statuses of an SDK check our developer docs.
Major version number | Status | Released | Deprecated | Unsupported |
---|---|---|---|---|
3.x.x | Active | September 2020 | TBA | TBA |
2.x.x | Inactive | February 2017 | September 2022 | September 2023 |
Updating from an Inactive, Deprecated, or Unsupported version of this SDK? Check our Migration Guide for tips.
var braintree = require("braintree");
var gateway = new braintree.BraintreeGateway({
environment: braintree.Environment.Sandbox,
merchantId: "your_merchant_id",
publicKey: "your_public_key",
privateKey: "your_private_key",
});
gateway.transaction.sale(
{
amount: "5.00",
paymentMethodNonce: "nonce-from-the-client",
options: {
submitForSettlement: true,
},
},
function (err, result) {
if (err) {
console.error(err);
return;
}
if (result.success) {
console.log("Transaction ID: " + result.transaction.id);
} else {
console.error(result.message);
}
}
);
You can also use Promises instead of callbacks.
var braintree = require("braintree");
var gateway = new braintree.BraintreeGateway({
environment: braintree.Environment.Sandbox,
merchantId: "your_merchant_id",
publicKey: "your_public_key",
privateKey: "your_private_key",
});
gateway.transaction
.sale({
amount: "5.00",
paymentMethodNonce: "nonce-from-the-client",
options: {
submitForSettlement: true,
},
})
.then(function (result) {
if (result.success) {
console.log("Transaction ID: " + result.transaction.id);
} else {
console.error(result.message);
}
})
.catch(function (err) {
console.error(err);
});
Almost all methods that uses a callback can alternatively use a Promise. The only exceptions are gateway.merchantAccount.all
or any of the search
methods because they return a stream if no callback is provided.
The Makefile
and Dockerfile
will build an image containing the dependencies and drop you to a terminal where you can run tests.
make
The unit specs can be run by anyone on any system, but the integration specs are meant to be run against a local development server of our gateway code. These integration specs are not meant for public consumption and will likely fail if run on your system. To run unit tests use rake (rake test:unit
) or npm (npm test
).
See the LICENSE file.
3.26.0
fail_on_duplicate_payment_method_for_customer
option to
ClientToken
PaymentMethod
CreditCard
blik_aliases
to LocalPaymentCompleted webhook and LocalPaymentDetailsSamsungPayCard
FAQs
A library for server-side integrating with Braintree.
The npm package braintree receives a total of 77,236 weekly downloads. As such, braintree popularity was classified as popular.
We found that braintree demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.