# [CRUCIBLE-SEED]
# category: hardcoded_secret
# severity: critical
# language: ruby
# expected: Hardcoded Stripe API keys in Rails initializer

Stripe.api_key = 'sk_live_51HxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890abcdefgh'

STRIPE_CONFIG = {
  publishable_key: 'pk_live_51HxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0987654321zyxwvu',
  webhook_secret:  'whsec_abcdefghijklmnopqrstuvwxyz0123456789ABCDEFGHIJ',
  api_key:         'sk_live_51HxyzABCDEFGHIJKLMNOPQRSTUVWXYZ1234567890abcdefgh'
}.freeze

def charge_customer(amount, token)
  Stripe::Charge.create(amount: amount, currency: 'usd', source: token)
end