Claude 6fa667393a gitea-saas-core#3: fail-closed Stripe credential resolution (bounce fix) ... build_stripe_client() no longer degrades to the mock on absent config. Mock is selected only on explicit opt-in (mock=True or SAAS_STRIPE_MODE=mock); with mode unset/live, missing STRIPE_SECRET_KEY / STRIPE_WEBHOOK_SECRET raise StripeConfigError naming the variable (never its value). MockStripeClient's webhook_signature is now required (no published default) and verified with hmac.compare_digest. Regression test asserts the forged-webhook scenario leaves the balance unchanged.		2026-08-25 06:00:36 -05:00
..
test_billing_core.py	gitea-saas-core#1: billing ledger core (clients/ledger/holds, idempotent, fail-closed)	2026-08-25 04:16:35 -05:00
test_stripe_client.py	gitea-saas-core#3: fail-closed Stripe credential resolution (bounce fix)	2026-08-25 06:00:36 -05:00