Expose client authorization to envvar config

gratipay · Sep 8, 2017 · 1097939 · 1097939
1 parent 9c8800c
commit 1097939
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 3 deletions.
diff --git a/defaults.env b/defaults.env
@@ -31,6 +31,7 @@ BRAINTREE_SANDBOX_MODE=true
 BRAINTREE_MERCHANT_ID=ddnq29fv74cqxwkg
 BRAINTREE_PUBLIC_KEY=f9xk4pb5ts86k67k
 BRAINTREE_PRIVATE_KEY=36ded60b7f4a43ebc605ca5f4b33d909
+BRAINTREE_CLIENT_AUTHORIZATION=sandbox_cr9dyy9c_bk8h97tqzyqjhtfn
 
 COINBASE_API_KEY=uETKVUrnPuXzVaVj
 COINBASE_API_SECRET=32zAkQCcHHYkGGn29VkvEZvn21PM1lgO

diff --git a/gratipay/wireup.py b/gratipay/wireup.py
@@ -351,6 +351,7 @@ def env():
         BRAINTREE_MERCHANT_ID           = unicode,
         BRAINTREE_PUBLIC_KEY            = unicode,
         BRAINTREE_PRIVATE_KEY           = unicode,
+        BRAINTREE_CLIENT_AUTHORIZATION  = unicode,
         GITHUB_CLIENT_ID                = unicode,
         GITHUB_CLIENT_SECRET            = unicode,
         GITHUB_CALLBACK                 = unicode,

diff --git a/js/gratipay/homepage.js b/js/gratipay/homepage.js
@@ -1,6 +1,6 @@
 Gratipay.homepage = {}
 
-Gratipay.homepage.initForm = function () {
+Gratipay.homepage.initForm = function(clientAuthorization) {
     $form = $('#homepage #content form');
     $submit= $form.find('button[type=submit]');
     $submit.click(Gratipay.homepage.submitForm);
@@ -9,7 +9,7 @@ Gratipay.homepage.initForm = function () {
     $promote.click(Gratipay.homepage.openPromote);
 
     braintree.dropin.create({
-      authorization: 'sandbox_cr9dyy9c_bk8h97tqzyqjhtfn',
+      authorization: clientAuthorization,
       container: '#braintree-container'
     }, function (createErr, instance) {
       $submit.click(function () {

diff --git a/www/index.spt b/www/index.spt
@@ -25,7 +25,11 @@ if not user.ANON:
 {% endblock %}
 
 {% block scripts %}
-<script>$(document).ready(Gratipay.homepage.initForm);</script>
+<script>
+$(document).ready(function() {
+    Gratipay.homepage.initForm('{{ website.env.braintree_client_authorization }}');
+});
+</script>
 {{ super() }}
 {% endblock %}