Hacker News Reader

Parent Full thread

bukinoshita

You can check an example here where I use `dotenv`.

https://github.com/bukinoshita/npm-donate/blob/master/exampl...

View on HN

So the latter? People need to have a stripe API key to use it to donate?

Just the project owner.

1. Project maintainer add `npm-donate`; 2. Creates stripe account; 3. Add API Key; 4. Release;

Users that wants to donate to the project, doesn't need an API key.

Add API key where? I don't get how this authenticates to Stripe without distributing the API key.

To the file where is calling `npm-donate`. But instead of hard code the API Key, you use some sort of dotenv to hide the API key from the end users.

When users install your package, they won't see your API key.

The code on the endusers machine needs the API key to function, since there is no server on the publishers side involved, right? So you have to give the API key to them in some way, if directly embedded in the code or not.

You are right. I will add a warning and try to figure it out a better way. Thanks!

fixed! released v0.0.2

Reply on news.ycombinator.com