ToolJetStripe

Security & Secret Vault

Call Stripe API from ToolJet Securely

Do not call Stripe from a ToolJet RunJS query, because RunJS executes in the browser and exposes the secret key. Add a RealComposer pipeline as a REST API data source instead. The edge injects STRIPE_SECRET_KEY from the vault and returns a compact customer and subscription object for your tables.

Sub-10ms edgeView Recipe

ToolJetREST API

Platforms & Frameworks

Fix CORS Errors in ToolJet REST API Calls

ToolJet CORS errors appear when a RunJS query or browser-side fetch hits an API that does not return Access-Control-Allow-Origin for your ToolJet domain. Route the call through a RealComposer pipeline: it handles the OPTIONS preflight, adds the right headers, and injects any upstream auth from the vault.

Sub-10ms edgeView Recipe