TIP: You can type at any time to perform a new search.
Payment Provider: Stripe
payment_stripe · odoo/odoo
Security findings
- Repository
- odoo/odoo · module folder
- Module version
- 2.0
- Category
- Accounting/Payment Providers
- Folder size
- 0.9 MB
- License
- LGPL-3
- Application
- No
- Auto-installable
- No
- Website
- None
- Last tracking update
- 2026-10-05 00:19:50
- Authors
- Odoo S.A.
- Maintainers
- Odoo S.A.
- Committers
- Odoo Translation Bot, Christophe Matthieu, Victor Feyens, Andrea Grazioso (agr-odoo), Tiffany Chang (tic), Antoine Vandevenne (anv), Valentin Chevalier, Pedram (PEBR), Levi Siuzdak (sile), Dylan Kiss (dyki), Valeriya(vchu), Lina (liew), dija-odoo, Pierre Lamotte (pila), Corentin Heinix (cohe), Valeriya (vchu), Shrey Mehta, Carmine, Mahdi Alijani (malj), anko-odoo, Krzysztof Magusiak (krma), Florian Malfroid, Tudor-Calin Panzaru (tupan), Waleed Elgamal, Lionel Piraux (lipi), Ravij Parikh, Mazen, Khaj-odoo, khaj-odoo, chpa-odoo, mekot-odoo
Code Analysis
Views touched (6)
| XML ID | Name | Model | Type | Status |
|---|---|---|---|---|
express_checkout |
express_checkout | ir.ui.view | qweb | Inherits payment.express_checkout |
express_checkout_form |
express_checkout_form | ir.ui.view | qweb | New |
inline_form |
inline_form | ir.ui.view | qweb | New |
payment_form |
payment_form | ir.ui.view | qweb | Inherits payment.form |
payment_provider_form |
Stripe Provider Form | payment.provider | form | Inherits payment.payment_provider_form |
sdk_assets |
sdk_assets | ir.ui.view | qweb | New |
HTTP endpoints (6)
| Route(s) | Handler | Auth | Type | Methods | Flags |
|---|---|---|---|---|---|
| (inherited route override) | OnboardingController.stripe_refresh_onboarding |
user | http | GET | |
| (inherited route override) | OnboardingController.stripe_return_from_onboarding |
user | http | GET | |
/payment/stripe/client_secret |
StripeController.stripe_acss_client_secret_route |
public | jsonrpc | ALL | sudo |
| (inherited route override) | StripeController.stripe_apple_pay_get_domain_association_file |
public | http | ALL | csrf off |
| (inherited route override) | StripeController.stripe_return |
public | http | GET | sudo |
| (inherited route override) | StripeController.stripe_webhook |
public | http | POST | csrf off sudo |
Models touched (3)
New fields (4)
-
codeSelectionondelete={'stripe': 'set default'}selection_add=[('stripe', 'Stripe')] -
stripe_publishable_keyCharcopy=Falsehelp='The key solely used to identify the account with Stripe'required_if_provider='stripe'string='Publishable Key' -
stripe_secret_keyCharcopy=Falsegroups='base.group_system'required_if_provider='stripe'string='Secret Key' -
stripe_webhook_secretCharcopy=Falsegroups='base.group_system'help='If a webhook is enabled on your Stripe account, this signing secret must be set to authenticate the messages sent from Stripe to Odoo.'string='Webhook Signing Secret'
-
action_start_onboarding(self, menu_id=None)Override of `payment` to create a Stripe Connect account and redirect the user to the next onboarding step. If the provider is already live, close the current window. Otherwise, generate a Stripe Connect onboarding link and redirect the user to it. If provided, the menu id is included in the URL the user is redirected to when coming back on Odoo after the onboarding. If the link generation failed, redirect the user to the provider form. Note: This method serves as a hook for modules that would fully implement Stripe Connect. Note: `self.ensure_one()` :param int menu_id: The menu from which the onboarding is started, as an `ir.ui.menu` id. :return: The next step action :rtype: dict :raise RedirectWarning: If the company's country is not supported. -
action_stripe_create_webhook(self)Create a webhook and return a feedback notification. Note: This action only works for instances using a public URL :return: The feedback notification :rtype: dict -
action_stripe_verify_apple_pay_domain(self)Verify the web domain with Stripe to enable Apple Pay. The domain is sent to Stripe API for them to verify that it is valid by making a request to the `/.well-known/apple-developer-merchantid-domain-association` route. If the domain is valid, it is registered to use with Apple Pay. See https://stripe.com/docs/stripe-js/elements/payment-request-button#verifying-your-domain-with-apple-pay. :returns: A client action with a success message. :rtype: dict :raise UserError: If test keys are used to send the request.
New fields (2)
-
stripe_mandateCharreadonly=Truestring='Stripe Mandate' -
stripe_payment_methodCharreadonly=Truestring='Stripe Payment Method ID'
No public methods.
New fields (0)
No new fields.
Public methods (0)No public methods.
Loading…
Loading…
Loading…
Loading…
Loading…
Loading…
Loading…
Loading…
Loading…
Loading…