# Available as a gem
sudo gem install stripe

# If you use bundler, you can add this line to your Gemfile
gem 'stripe'

# Install through pip
pip install --upgrade stripe

# Or find the Stripe package on http://pypi.python.org/pypi/stripe/

# Install the PHP library via Composer
composer require stripe/stripe-php

# Or download the source directly: https://github.com/stripe/stripe-php/releases

/*
 For Gradle, add the following dependency to your build.gradle and replace {VERSION} with
 the version number you want to use from
 - https://mvnrepository.com/artifact/com.stripe/stripe-java or
 - https://github.com/stripe/stripe-java/releases/latest
*/
implementation "com.stripe:stripe-java:{VERSION}"

<!--
  For Maven, add the following dependency to your POM and replace {VERSION} with the
  version number you want to use from
  - https://mvnrepository.com/artifact/com.stripe/stripe-java or
  - https://github.com/stripe/stripe-java/releases/latest
-->
<dependency>
  <groupId>com.stripe</groupId>
  <artifactId>stripe-java</artifactId>
  <version>{VERSION}</version>
</dependency>

# For other environments, manually install the following JARs:
# - The Stripe JAR from https://github.com/stripe/stripe-java/releases/latest
# - Google Gson from https://github.com/google/gson

# Install via npm
npm install --save stripe

# Install via go
go get github.com/stripe/stripe-go

// Then import the package
import (
  "github.com/stripe/stripe-go"
)

# Install via dotnet
dotnet add package Stripe.net
dotnet restore

# Or install via NuGet
PM> Install-Package Stripe.net

curl https://connect.stripe.com/oauth/token \
  -u sk_test_4eC39HqLyjWDarjtT1zdp7dc: \
  -d code=ac_123456789 \
  -d grant_type=authorization_code

# Using Sinatra.
require 'sinatra'
require 'stripe'

set :port, 4242

# Set your secret key. Remember to switch to your live secret key in production!
# See your keys here: https://dashboard.stripe.com/account/apikeys
Stripe.api_key = 'sk_test_4eC39HqLyjWDarjtT1zdp7dc'

get '/' do
  # Display landing page.
  content_type 'text/html'
  send_file File.join('./index.html')
end

get '/connect/oauth' do
  content_type 'application/json'

  # Assert the state matches the state you provided in the OAuth link (optional).
  state = params[:state]
  if !state_matches?(state)
    status 403
    return {error: 'Incorrect state parameter: ' + state}.to_json
  end

  # Send the authorization code to Stripe's API.
  code = params[:code]
  begin
    response = Stripe::OAuth.token({
      grant_type: 'authorization_code',
      code: code,
    })
  rescue Stripe::OAuth::InvalidGrantError
    status 400
    return {error: 'Invalid authorization code: ' + code}.to_json
  rescue Stripe::StripeError
    status 500
    return {error: 'An unknown error occurred.'}.to_json
  end

  connected_account_id = response.stripe_user_id
  save_account_id(connected_account_id)

  # Render some HTML or redirect to a different page.
  status 200
  {success: true}.to_json
end

def state_matches?(state_parameter)
  # Load the same state value that you randomly generated for your OAuth link.
  saved_state = '{{ STATE }}'

  saved_state == state_parameter
end

def save_account_id(id)
  # Save the connected account ID from the response to your database.
  puts 'Connected account ID: ' + id
end

import stripe
import json

# Using Flask.
from flask import (
    Flask,
    render_template,
    request,
)

app = Flask(__name__, static_folder=".",
            static_url_path="", template_folder=".")

@app.route('/', methods=['GET'])
def get_example():
  # Display landing page.
  return render_template('index.html')

# Set your secret key. Remember to switch to your live secret key in production!
# See your keys here: https://dashboard.stripe.com/account/apikeys
stripe.api_key = 'sk_test_4eC39HqLyjWDarjtT1zdp7dc'

@app.route("/connect/oauth", methods=["GET"])
def handle_oauth_redirect():
  # Assert the state matches the state you provided in the OAuth link (optional).
  state = request.args.get("state")

  if not state_matches(state):
    return json.dumps({"error": "Incorrect state parameter: " + state}), 403

  # Send the authorization code to Stripe's API.
  code = request.args.get("code")
  try:
    response = stripe.OAuth.token(grant_type="authorization_code", code=code,)
  except stripe.oauth_error.OAuthError as e:
    return json.dumps({"error": "Invalid authorization code: " + code}), 400
  except Exception as e:
    return json.dumps({"error": "An unknown error occurred."}), 500

  connected_account_id = response["stripe_user_id"]
  save_account_id(connected_account_id)

  # Render some HTML or redirect to a different page.
  return json.dumps({"success": True}), 200

def state_matches(state_parameter):
  # Load the same state value that you randomly generated for your OAuth link.
  saved_state = "{{ STATE }}"

  return saved_state == state_parameter

def save_account_id(id):
  # Save the connected account ID from the response to your database.
  print("Connected account ID: ", id)

if __name__ == "__main__":
    app.run(port=4242)

<?php
// Using Slim.
use Slim\Http\Request;
use Slim\Http\Response;
use Stripe\Stripe;

require_once('vendor/autoload.php');

$app = new \Slim\App;

// Set your secret key. Remember to switch to your live secret key in production!
// See your keys here: https://dashboard.stripe.com/account/apikeys
\Stripe\Stripe::setApiKey('sk_test_4eC39HqLyjWDarjtT1zdp7dc');

$app->get('/', function (Request $request, Response $response, array $args) {
  // Display landing page.
  return $response->write(file_get_contents('./index.html'));
});

$app->get('/connect/oauth', function ($request, $response, $next) {
  extract($request->getQueryParams());

  // Assert the state matches the state you provided in the OAuth link (optional).
  if (!stateMatches($state))
    return $response->withStatus(403)->withJson(array('error' => 'Incorrect state parameter: ' . $state));

  // Send the authorization code to Stripe's API.
  $code = $request->getQueryParam('code');

  try {
    $stripeResponse = \Stripe\OAuth::token([
      'grant_type' => 'authorization_code',
      'code' => $code,
    ]);
  } catch (\Stripe\Error\OAuth\InvalidGrant $e) {
    return $response->withStatus(400)->withJson(array('error' => 'Invalid authorization code: ' . $code));
  } catch (Exception $e) {
    return $response->withStatus(500)->withJson(array('error' => 'An unknown error occurred.'));
  }

  $connectedAccountId = $stripeResponse->stripe_user_id;
  saveAccountId($connectedAccountId);

  // Render some HTML or redirect to a different page.
  return $response->withStatus(200)->withJson(array('success' => true));
});

function stateMatches($stateParameter) {
  // Load the same state value that you randomly generated for your OAuth link.
  $savedState = '{{ STATE }}';

  return $savedState == $stateParameter;
};

function saveAccountId($id) {
  // Save the connected account ID from the response to your database.
  echo 'Connected account ID: ' . $id;
};

$app->run();

// Using Express
const express = require('express');
const app = express();
app.use(express.json());
const { resolve } = require("path");

// Set your secret key. Remember to switch to your live secret key in production!
// See your keys here: https://dashboard.stripe.com/account/apikeys
const stripe = require('stripe')('sk_test_4eC39HqLyjWDarjtT1zdp7dc');

app.get("/", (req, res) => {
  // Display landing page.
  const path = resolve("./index.html");
  res.sendFile(path);
});

app.get("/connect/oauth", async (req, res) => {
  const { code, state } = req.query;

  // Assert the state matches the state you provided in the OAuth link (optional).
  if(!stateMatches(state)) {
    return res.status(403).json({ error: 'Incorrect state parameter: ' + state });
  }

  var error;

  // Send the authorization code to Stripe's API.
  stripe.oauth.token({
    grant_type: 'authorization_code',
    code
  }).then(
    (response) => {
      var connected_account_id = response.stripe_user_id;
      saveAccountId(connected_account_id);

      // Render some HTML or redirect to a different page.
      return res.status(200).json({success: true});
    },
    (err) => {
      if (err.type === 'StripeInvalidGrantError') {
        return res.status(400).json({error: 'Invalid authorization code: ' + code});
      } else {
        return res.status(500).json({error: 'An unknown error occurred.'});
      }
    }
  );
});

const stateMatches = (state_parameter) => {
  // Load the same state value that you randomly generated for your OAuth link.
  const saved_state = 'sv_53124';

  return saved_state == state_parameter;
}

const saveAccountId = (id) => {
  // Save the connected account ID from the response to your database.
  console.log('Connected account ID: ' + id);
}

app.listen(4242, () => console.log(`Node server listening on port ${4242}!`));

package com.stripe.sample;

import com.google.gson.Gson;
import com.stripe.Stripe;
import com.stripe.net.OAuth;
import com.stripe.model.oauth.TokenResponse;
import com.stripe.exception.StripeException;
import com.stripe.exception.oauth.InvalidGrantException;
import spark.Response;

import java.nio.file.Paths;
import java.util.HashMap;
import java.util.Map;

// Using Spark.
import static spark.Spark.*;

import io.github.cdimascio.dotenv.Dotenv;

public class Server {
  private static Gson gson = new Gson();

  public static void main(String[] args) {
    port(4242);

    // Set your secret key. Remember to switch to your live secret key in production!
    // See your keys here: https://dashboard.stripe.com/account/apikeys
    Stripe.apiKey = "sk_test_4eC39HqLyjWDarjtT1zdp7dc";

    staticFiles.externalLocation("../client");

    get("/connect/oauth", (request, response) -> {
      // Assert the state matches the state you provided in the OAuth link (optional).
      String state = request.queryParams("state");
      if (!stateMatches(state)) {
        return buildResponse(
          response, 403, "error", "Incorrect state parameter: " + state
        );
      }

      // Send the authorization code to Stripe's API.
      String code = request.queryParams("code");
      Map<String, Object> params = new HashMap<>();
      params.put("grant_type", "authorization_code");
      params.put("code", code);

      try {
        TokenResponse stripeResponse = OAuth.token(params, null);
        // Save the connected account ID from the response to your database.
        String connectedAccountId = stripeResponse.getStripeUserId();
        saveAccountId(connectedAccountId);

        // Render some HTML or redirect to a different page.
        return buildResponse(response, 200, "success", "Request succeeded.");
      } catch (InvalidGrantException e) {
        // There's a problem with the authorization code.
        return buildResponse(
          response, 400, "error", "Invalid authorization code: " + code
        );
      } catch (StripeException e) {
        // All other errors.
        return buildResponse(
          response, 500, "error", "An unknown error occurred."
        );
      }
    });
  }

  private static boolean stateMatches(String parameterState) {
    // Load the same state value that you randomly generated for your OAuth link.
    String savedState = "{{ STATE }}";

    return savedState.equals(parameterState);
  }

  private static void saveAccountId(String id) {
    System.out.println("Connected account ID: " + id);
  }

  private static String buildResponse(
    Response response, int statusCode, String type, String message
  ) {
    response.status(statusCode);
    Map<String, String> errorResponse = new HashMap<>();
    errorResponse.put(type, message);
    return gson.toJson(errorResponse);
  }
}

package main

import (
  "encoding/json"
  "log"
  "fmt"
  "net/http"

  "github.com/stripe/stripe-go"
  "github.com/stripe/stripe-go/oauth"

  "os"
)

type CreateOAuthResponse struct {
  Success      bool   `json:"success"`
}

func main() {
  // Set your secret key. Remember to switch to your live secret key in production!
  // See your keys here: https://dashboard.stripe.com/account/apikeys
  stripe.Key = "sk_test_4eC39HqLyjWDarjtT1zdp7dc"

  // Display landing page.
  fs := http.FileServer(http.Dir("static"))
  http.Handle("/", fs)

  http.HandleFunc("/connect/oauth", handleOauthRedirect)
  addr := "localhost:4242"

  log.Printf("Listening on %s ...", addr)
  log.Fatal(http.ListenAndServe(addr, nil))
}

func handleOauthRedirect(w http.ResponseWriter, r *http.Request) {
  query := r.URL.Query()

  // Assert the state matches the state you provided in the OAuth link (optional).
  state := query.Get("state")
  if !stateMatches(state, w) {
    http.Error(w, fmt.Sprintf("Invalid state parameter: %s", state), http.StatusForbidden)
    return
  }

  // Send the authorization code to Stripe's API.
  code := query.Get("code")
  params := &stripe.OAuthTokenParams{
    GrantType: stripe.String("authorization_code"),
    Code:      &code,
  }
  token, err := oauth.New(params)

  if  err != nil {
    stripeErr := err.(*stripe.Error)
    if (stripeErr.OAuthError == "invalid_grant") {
      http.Error(w, fmt.Sprintf("Invalid authorization code: %s", code), http.StatusBadRequest)
    } else {
      http.Error(w, "An unknown error occurred.", http.StatusInternalServerError)
    }
    return
  }

  connectedAccountId := token.StripeUserID
  saveAccountId(connectedAccountId)

      // Render some HTML or redirect to a different page.
  json.NewEncoder(w).Encode(CreateOAuthResponse{
    Success:      true,
  })
}

func stateMatches(state_parameter string, w http.ResponseWriter) bool {
  // Load the same state value that you randomly generated for your OAuth link.
  saved_state := "{{ STATE }}"

	return saved_state == state_parameter
}

func saveAccountId(id string) {
  // Save the connected account ID from the response to your database.
  log.Println("Connected account ID: " + id)
}

using System;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Logging;
using Microsoft.Extensions.Options;
using Microsoft.AspNetCore.Http;

using Stripe;
using Newtonsoft.Json;

namespace Controllers
{
  public class ConnectController : Controller
  {
    private readonly StripeClient client;
    private readonly IOptions<StripeOptions> options;
    private readonly ILogger<ConnectController> logger;

    public ConnectController(
      IOptions<StripeOptions> options,
      ILogger<ConnectController> logger,
    ) {
      // Set your secret key: remember to switch to your live secret key in production
      // See your keys here: https://dashboard.stripe.com/account/apikeys
      this.client = new StripeClient("sk_test_4eC39HqLyjWDarjtT1zdp7dc");
      this.options = options;
      this.logger = logger;
    }

    [HttpGet("/connect/oauth")]
    public IActionResult HandleOAuthRedirect(
      [FromQuery] string state,
      [FromQuery] string code
    ) {
      var service = new OAuthTokenService(client);

      // Assert the state matches the state you provided in the OAuth link (optional).
      if (!StateMatches(state))
      {
        return StatusCode(
          StatusCodes.Status403Forbidden,
          Json(new { Error = String.Format("Incorrect state parameter: {0}", state) })
        );
      }

      // Send the authorization code to Stripe's API.
      var options = new OAuthTokenCreateOptions
      {
        GrantType = "authorization_code",
        Code = code,
      };

      OAuthToken response = null;

      try
      {
        response = service.Create(options);
      }
      catch (StripeException e)
      {
        if (e.StripeError != null && e.StripeError.Error == "invalid_grant") {
          return StatusCode(
            StatusCodes.Status400BadRequest,
            Json(new { Error = String.Format("Invalid authorization code: {0}", code) })
          );
        } else {
          return StatusCode(
            StatusCodes.Status500InternalServerError,
            Json(new { Error = "An unknown error occurred." })
          );
        }
      }

      var connectedAccountId = response.StripeUserId;
      SaveAccountId(connectedAccountId);

      // Render some HTML or redirect to a different page.
      return new OkObjectResult(Json(new { Success = true }));
    }

    private bool StateMatches(string stateParameter)
    {
      // Load the same state value that you randomly generated for your OAuth link.
      var savedState = "{{ STATE }}";

      return savedState == stateParameter;
    }

    private void SaveAccountId(string id)
    {
      // Save the connected account ID from the response to your database.
      logger.LogInformation($"Connected account ID: {id}");
    }
  }
}

curl https://api.stripe.com/v1/checkout/sessions \
  -u sk_test_4eC39HqLyjWDarjtT1zdp7dc: \
  -d "payment_method_types[]"=card \
  -d "line_items[][name]"="Drive Club transportation" \
  -d "line_items[][amount]"=1000 \
  -d "line_items[][currency]"=usd \
  -d "line_items[][quantity]"=1 \
  -d "payment_intent_data[application_fee_amount]"=123 \
  -d "payment_intent_data[transfer_data][destination]"="{{CONNECTED_STRIPE_ACCOUNT_ID}}" \
  -d success_url="https://example.com/success" \
  -d cancel_url="https://example.com/failure"

session = Stripe::Checkout::Session.create({
  payment_method_types: ['card'],
  line_items: [{
    name: "Drive Club transportation",
    amount: 1000,
    currency: 'usd',
    quantity: 1,
  }],
  payment_intent_data: {
    application_fee_amount: 123,
    transfer_data: {
      destination: '{{CONNECTED_STRIPE_ACCOUNT_ID}}',
    },
  },
  success_url: 'https://example.com/success',
  cancel_url: 'https://example.com/failure',
})

session = stripe.checkout.Session.create(
  payment_method_types=['card'],
  line_items=[{
    'name': "Drive Club transportation",
    'amount': 1000,
    'currency': 'usd',
    'quantity': 1,
  }],
  payment_intent_data={
    'application_fee_amount': 123,
    'transfer_data': {
      'destination': '{{CONNECTED_STRIPE_ACCOUNT_ID}}',
    },
  },
  success_url='https://example.com/success',
  cancel_url='https://example.com/failure',
)

$session = \\Stripe\\Checkout\\Session::create([
  'payment_method_types' => ['card'],
  'line_items' => [[
    'name' => "Drive Club transportation",
    'amount' => 1000,
    'currency' => 'usd',
    'quantity' => 1,
  ]],
  'payment_intent_data' => [
    'application_fee_amount' => 123,
    'transfer_data' => [
      'destination' => '{{CONNECTED_STRIPE_ACCOUNT_ID}}',
    ],
  ],
  'success_url' => 'https://example.com/success',
  'cancel_url' => 'https://example.com/failure',
]);

Map<String, Object> params = new HashMap<String, Object>();

ArrayList<String> paymentMethodTypes = new ArrayList<>();
paymentMethodTypes.add("card");
params.put("payment_method_types", paymentMethodTypes);

ArrayList<HashMap<String, Object>> lineItems = new ArrayList<>();
HashMap<String, Object> lineItem = new HashMap<String, Object>();
lineItem.put("name", "Drive Club transportation");
lineItem.put("amount", 1000);
lineItem.put("currency", "usd");
lineItem.put("quantity", 1);
lineItems.add(lineItem);
params.put("line_items", lineItems);

HashMap<String, Object> paymentIntentData = new HashMap<String, Object>();
paymentIntentData.put("application_fee_amount", 123);
HashMap<String, Object> transferData = new HashMap<String, Object>();
transferData.put("destination", "{{CONNECTED_STRIPE_ACCOUNT_ID}}");
paymentIntentData.put("transfer_data", transferData);
params.put("payment_intent_data", paymentIntentData);

params.put("success_url", "https://example.com/success");
params.put("cancel_url", "https://example.com/failure");

Session session = Session.create(params, requestOptions);

(async () => {
  const session = await stripe.checkout.sessions.create({
    payment_method_types: ['card'],
    line_items: [{
      name: "Drive Club transportation",
      amount: 1000,
      currency: 'usd',
      quantity: 1,
    }],
    payment_intent_data: {
      application_fee_amount: 123,
      transfer_data: {
        destination: '{{CONNECTED_STRIPE_ACCOUNT_ID}}',
      },
    },
    success_url: 'https://example.com/success',
    cancel_url: 'https://example.com/failure',
  });
})();

params := &stripe.CheckoutSessionParams{
    PaymentMethodTypes: stripe.StringSlice([]string{
        "card",
    }),
    LineItems: []*stripe.CheckoutSessionLineItemParams{
        &stripe.CheckoutSessionLineItemParams{
            Name: stripe.String("Drive Club transportation"),
            Amount: stripe.Int64(1000),
            Currency: stripe.String(string(stripe.CurrencyUSD)),
            Quantity: stripe.Int64(1),
        },
    },
    PaymentIntentData: &stripe.CheckoutSessionPaymentIntentDataParams{
        ApplicationFeeAmount: stripe.Int64(123),
        TransferData: &stripe.CheckoutSessionPaymentIntentDataTransferDataParams{
          Destination: stripe.String("{{CONNECTED_STRIPE_ACCOUNT_ID}}"),
        },
    },
    SuccessURL: stripe.String("https://example.com/success"),
    CancelURL: stripe.String("https://example.com/failure"),
}

session, err := session.New(params)

var options = new SessionCreateOptions
{
    PaymentMethodTypes = new List<string>
    {
        "card",
    },
    LineItems = new List<SessionLineItemOptions>
    {
        new SessionLineItemOptions
        {
            Name = "Drive Club transportation",
            Amount = 1000,
            Currency = "usd",
            Quantity = 1,
        },
    },
    PaymentIntentData = new SessionPaymentIntentDataOptions
    {
        ApplicationFeeAmount = 123,
        TransferData = new SessionPaymentIntentTransferDataOptions
        {
          Destination = "{{CONNECTED_STRIPE_ACCOUNT_ID}}",
        },
    },
    SuccessUrl = "https://example.com/success",
    CancelUrl = "https://example.com/failure",
};

var service = new SessionService();
Session session = service.Create(options);

var stripe = Stripe('pk_test_TYooMQauvdEDq54NiTphI7jx');

stripe.redirectToCheckout({
  // Make the id field from the Checkout Session creation API response
  // available to this file, so you can provide it as parameter here
  // instead of the {{CHECKOUT_SESSION_ID}} placeholder.
  sessionId: '{{CHECKOUT_SESSION_ID}}'
}).then(function (result) {
  // If `redirectToCheckout` fails due to a browser or network
  // error, display the localized error message to your customer
  // using `result.error.message`.
});

const stripe = Stripe('pk_test_TYooMQauvdEDq54NiTphI7jx');

const {error} = await stripe.redirectToCheckout({
  // Make the id field from the Checkout Session creation API response
  // available to this file, so you can provide it as parameter here
  // instead of the {{CHECKOUT_SESSION_ID}} placeholder.
  sessionId: '{{CHECKOUT_SESSION_ID}}'
})
// If `redirectToCheckout` fails due to a browser or network
// error, display the localized error message to your customer
// using `error.message`.

# Using Sinatra.
require 'sinatra'
require 'stripe'

set :port, 4242

# Set your secret key. Remember to switch to your live secret key in production!
# See your keys here: https://dashboard.stripe.com/account/apikeys
Stripe.api_key = 'sk_test_4eC39HqLyjWDarjtT1zdp7dc'

# Uncomment and replace with a real secret. You can find your endpoint's
# secret in your webhook settings.
# webhook_secret = 'whsec_...'

post '/webhook' do
  payload = request.body.read
  sig_header = request.env['HTTP_STRIPE_SIGNATURE']

  event = nil

  # Verify webhook signature and extract the event.
  # See https://stripe.com/docs/webhooks/signatures for more information.
  begin
    event = Stripe::Webhook.construct_event(
      payload, sig_header, webhook_secret
    )
  rescue JSON::ParserError => e
    # Invalid payload.
    status 400
    return
  rescue Stripe::SignatureVerificationError => e
    # Invalid Signature.
    status 400
    return
  end

  if event['type'] == 'checkout.session.completed'
    session = event['data']['object']
    handle_checkout_session(session)
  end

  status 200
end

def handle_checkout_session(session)
  # Fulfill the purchase.
  puts 'Session: ' + session.to_s
end

import stripe
import json

# Using Flask.
from flask import (
    Flask,
    render_template,
    request,
)

app = Flask(__name__, static_folder=".",
            static_url_path="", template_folder=".")

# Set your secret key. Remember to switch to your live secret key in production!
# See your keys here: https://dashboard.stripe.com/account/apikeys
stripe.api_key = 'sk_test_4eC39HqLyjWDarjtT1zdp7dc'

# Uncomment and replace with a real secret. You can find your endpoint's
# secret in your webhook settings.
# webhook_secret = 'whsec_...'

@app.route("/webhook", methods=["POST"])
def webhook_received():
  request_data = json.loads(request.data)
  signature = request.headers.get("stripe-signature")

  # Verify webhook signature and extract the event.
  # See https://stripe.com/docs/webhooks/signatures for more information.
  try:
    event = stripe.Webhook.construct_event(
        payload=request.data, sig_header=signature, secret=webhook_secret
    )
  except ValueError as e:
    # Invalid payload.
    return HttpResponse(status=400)
  except stripe.error.SignatureVerificationError as e:
    # Invalid Signature.
    return HttpResponse(status=400)

  if event["type"] == "checkout.session.completed":
    session = event["data"]["object"]
    handle_checkout_session(session)

  return json.dumps({"success": True}), 200

def handle_checkout_session(session):
  # Fulfill the purchase.
  print('Session: ' + str(session))

if __name__ == "__main__":
  app.run(port=4242)

<?php
// Using Slim.
use Slim\Http\Request;
use Slim\Http\Response;
use Stripe\Stripe;

require_once('vendor/autoload.php');

$app = new \Slim\App;

// Set your secret key. Remember to switch to your live secret key in production!
// See your keys here: https://dashboard.stripe.com/account/apikeys
\Stripe\Stripe::setApiKey('sk_test_4eC39HqLyjWDarjtT1zdp7dc');

// Uncomment and replace with a real secret. You can find your endpoint's
// secret in your webhook settings.
// $webhook_secret = 'whsec_...';

$app->post('/webhook', function ($request, $response, $next) {
  $payload = $request->getBody();
  $sig_header = $request->getHeaderLine('stripe-signature');

  $event = null;

  // Verify webhook signature and extract the event.
  // See https://stripe.com/docs/webhooks/signatures for more information.
  try {
    $event = \Stripe\Webhook::constructEvent(
      $payload, $sig_header, $webhook_secret
    );
  } catch(\UnexpectedValueException $e) {
    // Invalid payload.
    return $response->withStatus(400);
  } catch(\Stripe\Exception\SignatureVerificationException $e) {
    // Invalid Signature.
    return $response->withStatus(400);
  }

  if ($event->type == 'checkout.session.completed') {
    $session = $event->data->object;
    handleCheckoutSession($session);
  }

  return $response->withStatus(200);
});

function handleCheckoutSession($session) {
  // Fulfill the purchase.
  echo 'Session: ' . $session;
};

$app->run();

// Using Express
const express = require('express');
const bodyParser = require("body-parser");
const app = express();
app.use(express.json());

// Use JSON parser for all non-webhook routes
app.use((req, res, next) => {
  if (req.originalUrl === "/webhook") {
    next();
  } else {
    bodyParser.json()(req, res, next);
  }
});

// Set your secret key. Remember to switch to your live secret key in production!
// See your keys here: https://dashboard.stripe.com/account/apikeys
const stripe = require('stripe')('sk_test_4eC39HqLyjWDarjtT1zdp7dc');

// Uncomment and replace with a real secret. You can find your endpoint's
// secret in your webhook settings.
// const webhook_secret = 'whsec_...''

app.post('/webhook', bodyParser.raw({type: 'application/json'}), (request, response) => {
  const sig = request.headers['stripe-signature'];

  let event;

  // Verify webhook signature and extract the event.
  // See https://stripe.com/docs/webhooks/signatures for more information.
  try {
    event = stripe.webhooks.constructEvent(request.body, sig, webhook_secret);
  } catch (err) {
    return response.status(400).send(`Webhook Error: ${err.message}`);
  }

  if (event.type === 'checkout.session.completed') {
    const session = event.data.object;
    handleCheckoutSession(session);
  }

  response.json({received: true});
});

const handleCheckoutSession = (session) => {
    // Fulfill the purchase.
  console.log('Session: ' + JSON.stringify(session));
}

app.listen(4242, () => console.log(`Node server listening on port ${4242}!`));

package com.stripe.sample;

import com.stripe.Stripe;
import com.stripe.model.checkout.Session;
import com.stripe.model.Event;
import com.stripe.model.EventDataObjectDeserializer;
import com.stripe.exception.SignatureVerificationException;
import com.stripe.net.Webhook;
import com.google.gson.JsonSyntaxException;
import spark.Response;

// Using Spark.
import static spark.Spark.*;

public class Server {
  public static void main(String[] args) {
    port(4242);

    // Set your secret key. Remember to switch to your live secret key in production!
    // See your keys here: https://dashboard.stripe.com/account/apikeys
    Stripe.apiKey = "sk_test_4eC39HqLyjWDarjtT1zdp7dc";
    post("/webhook", (request, response) -> {
      String payload = request.body();
      String sigHeader = request.headers("Stripe-Signature");

      // Uncomment and replace with a real secret. You can find your endpoint's
      // secret in your webhook settings.
      // String webhookSecret = "whsec_..."

      Event event = null;

      // Verify webhook signature and extract the event.
      // See https://stripe.com/docs/webhooks/signatures for more information.
      try {
        event = Webhook.constructEvent(
          payload, sigHeader, webhookSecret
        );
      } catch (JsonSyntaxException e) {
      // Invalid payload.
        response.status(400);
        return "";
      } catch (SignatureVerificationException e) {
      // Invalid Signature.
        response.status(400);
        return "";
      }

      if ("checkout.session.completed".equals(event.getType())) {
        // Deserialize the nested object inside the event
        EventDataObjectDeserializer dataObjectDeserializer = event.getDataObjectDeserializer();
        Session session = null;
        if (dataObjectDeserializer.getObject().isPresent()) {
          session = (Session) dataObjectDeserializer.getObject().get();
          handleCheckoutSession(session);
        } else {
          // Deserialization failed, probably due to an API version mismatch.
          // Refer to the Javadoc documentation on `EventDataObjectDeserializer` for
          // instructions on how to handle this case, or return an error here.
        }
      }

      response.status(200);
      return "";
    });
  }

  private static void handleCheckoutSession(Session session) {
    // Fulfill the purchase.
    System.out.println("Session ID: " + session.getId());
  }
}

package main

import (
  "encoding/json"
  "log"
  "fmt"
  "net/http"
  "io/ioutil"

  "github.com/stripe/stripe-go"
  "github.com/stripe/stripe-go/webhook"

  "os"
)

func main() {
  // Set your secret key. Remember to switch to your live secret key in production!
  // See your keys here: https://dashboard.stripe.com/account/apikeys
  stripe.Key = "sk_test_4eC39HqLyjWDarjtT1zdp7dc"

  http.HandleFunc("/webhook", handleWebhook)
  addr := "localhost:4242"

  log.Printf("Listening on %s ...", addr)
  log.Fatal(http.ListenAndServe(addr, nil))
}

func handleWebhook(w http.ResponseWriter, req *http.Request) {
  const MaxBodyBytes = int64(65536)
  req.Body = http.MaxBytesReader(w, req.Body, MaxBodyBytes)
  body, err := ioutil.ReadAll(req.Body)
  if err != nil {
      fmt.Fprintf(os.Stderr, "Error reading request body: %v\n", err)
      w.WriteHeader(http.StatusServiceUnavailable)
      return
  }

  // Uncomment and replace with a real secret. You can find your endpoint's
  // secret in your webhook settings.
  // webhookSecret := "whsec_..."

  // Verify webhook signature and extract the event.
  // See https://stripe.com/docs/webhooks/signatures for more information.
  event, err := webhook.ConstructEvent(body, req.Header.Get("Stripe-Signature"), webhookSecret)

  if err != nil {
      fmt.Fprintf(os.Stderr, "Error verifying webhook signature: %v\n", err)
      w.WriteHeader(http.StatusBadRequest) // Return a 400 error on a bad signature.
      return
  }

  if event.Type == "checkout.session.completed" {
      var session stripe.CheckoutSession
      err := json.Unmarshal(event.Data.Raw, &session)
      if err != nil {
          fmt.Fprintf(os.Stderr, "Error parsing webhook JSON: %v\n", err)
          w.WriteHeader(http.StatusBadRequest)
          return
      }
      handleCheckoutSession(session)
  }

  w.WriteHeader(http.StatusOK)
}

func handleCheckoutSession(session stripe.CheckoutSession) {
  // Fulfill the purchase.
  log.Println("Session ID: " + session.ID)
}

// Set your secret key. Remember to switch to your live secret key in production!
// See your keys here: https://dashboard.stripe.com/account/apikeys
StripeConfiguration.ApiKey = "sk_test_4eC39HqLyjWDarjtT1zdp7dc";

using System;
using System.IO;
using System.Threading.Tasks;
using Microsoft.AspNetCore.Mvc;
using Microsoft.Extensions.Logging;

using Stripe;
using Stripe.Checkout;

namespace Controllers
{
  public class ConnectController : Controller
  {
    private readonly ILogger<ConnectController> logger;

    public ConnectController(
      ILogger<ConnectController> logger,
    ) {
      this.logger = logger;
    }

    [HttpPost("webhook")]
    public async Task<IActionResult> ProcessWebhookEvent()
    {
      var json = await new StreamReader(HttpContext.Request.Body).ReadToEndAsync();

      // Uncomment and replace with a real secret. You can find your endpoint's
      // secret in your webhook settings.
      // const string webhookSecret = "whsec_..."

      // Verify webhook signature and extract the event.
      // See https://stripe.com/docs/webhooks/signatures for more information.
      try
      {
        var stripeEvent = EventUtility.ConstructEvent(json, Request.Headers["Stripe-Signature"], webhookSecret);

        if (stripeEvent.Type == Events.CheckoutSessionCompleted) {
          var session = stripeEvent.Data.Object as Session;
          HandleCheckoutSession(session);
        }

        return Ok();
      }
      catch (Exception e)
      {
        logger.LogInformation(e.ToString());
        return BadRequest();
      }
    }

    private void HandleCheckoutSession(Session session) {
      logger.LogInformation($"Session: {session}");
    }
  }
}