
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
tilled-node
Advanced tools
This SDK was generated using the Typescript-Axios generator with the following codegen.conf.json
In your root directory, run the following command:
npm install tilled-node --save
To use any of the modules in this SDK, will need to import an ApiKeys module in addition to the module you are attempting to use. To create and confirm a payment intent, you will need to import the PaymentIntentsApi and PaymentIntentsApiKeys modules like so:
import {
Configuration,
PaymentIntentsApi,
PaymentIntentCreateParams,
PaymentIntentConfirmParams
} from 'tilled-node';
These examples only feature the PaymentIntentsApi, but this SDK is capable of making any of our other documented API calls. Our other APIs can be found in the api directory.
Once you have imported both modules, Set This SDK Axios to make HTTP requests.
const config = new Configuration({
apiKey: process.env.TILLED_SECRET_KEY,
basePath: 'https://sandbox-api.tilled.com', // defaults to https://api.tilled.com
baseOptions: { timeout: 2000 } // override default settings with an Axios config
});
This SDK's basePath defaults to the production environment. The example above reassigns this property to the sandbox URL. Be sure to verify that you are using the correct credentials for the environment you are working in.
Use your newly created config to create a new class instance of the API module:
const paymentIntentsApi = new PaymentIntentsApi(config);
We are now ready to make a payment. First, we need to create a payment intent. This should be done as soon as your checkout page or component is loaded. You can set up the endpoint for your frontend like so:
app.post(
'/payment-intents',
(
req: Request & {
headers: {
tilled_account: string;
};
body: PaymentIntentCreateParams;
},
res: Response & {
json: any;
send: any;
status: any;
}
) => {
const { tilled_account } = req.headers;
paymentIntentsApi
.createPaymentIntent({
tilled_account,
PaymentIntentCreateParams: req.body
})
.then((response) => {
return response.data;
})
.then((data) => {
res.json(data);
console.log(data);
})
.catch((error) => {
console.error(error);
res.status(404).json(error);
});
}
);
In this example, we are passing the payment intent parameter in the request body from our frontend. Note that we are using the PaymentIntentCreateParams type that we imported earlier.
Now that we have a payment intent, let's confirm it:
app.post(
'/payment-intents/:id/confirm',
(
req: Request & {
headers: {
tilled_account: string;
};
params: {
id: string;
};
body: PaymentIntentConfirmParams;
},
res: Response & {
json: any;
send: any;
status: any;
}
) => {
const { tilled_account } = req.headers;
const { id } = req.params;
paymentIntentsApi
.confirmPaymentIntent({
tilled_account,
id,
PaymentIntentConfirmParams: req.body
})
.then((response) => {
return response.data;
})
.then((data) => {
res.json(data);
console.log(data);
})
.catch((error) => {
console.error(error);
res.status(404).json(error);
});
}
);
This example assumes that you are creating a payment intent on the client with Tilled.js and passing it your request body. If you meet the PCI requirements to use the Create a Payment Method endpoint and choose to use it, you will need to import the modules for the PaymentMethodsApi and create your payment method with the createPaymentMethod method.
FAQs
NodeJS SDK client for Tilled's API
The npm package tilled-node receives a total of 7,613 weekly downloads. As such, tilled-node popularity was classified as popular.
We found that tilled-node demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.