Back to Details

check-payments

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

/check-payments

/check-payments

Audit all payment providers. Orchestrates provider checks, consolidates output.
审计所有支付提供商。协调各提供商的检查任务，整合输出结果。

What This Does

功能说明

  1. Detect configured payment providers
  2. Run applicable provider checks
  3. Consolidate findings into one P0-P3 report
This is a primitive. Investigate only. No fixes.
  1. 检测已配置的支付提供商
  2. 运行对应提供商的检查任务
  3. 将审计结果整合为一份P0-P3级别的报告
注意：这是基础审计工具，仅用于调查，不提供修复功能。

Process

操作流程

1. Detect Providers

1. 检测提供商

Run detection below. Note which providers are present.
运行下方的检测脚本，记录已存在的提供商。

2. Run Checks

2. 执行检查

Run only applicable checks:
  • /check-stripe
  • /check-bitcoin
  • /check-lightning
  • /check-btcpay
仅运行与已检测到的提供商对应的检查任务：
  • /check-stripe
  • /check-bitcoin
  • /check-lightning
  • /check-btcpay

3. Consolidate Findings

3. 整合结果

Merge findings into one report. Deduplicate overlaps. Keep P0-P3.
将各检查结果合并为一份报告，去重重叠内容，保留P0-P3级别的问题。

Provider Detection

提供商检测脚本

bash
undefined
bash
undefined

Stripe: package + env

Stripe: 包依赖 + 环境变量

grep -q "stripe" package.json 2>/dev/null && echo "✓ Stripe SDK" || echo "✗ Stripe SDK" env | grep -q "STRIPE_" && echo "✓ STRIPE_* vars" || grep -q "STRIPE_" .env.local 2>/dev/null && echo "✓ STRIPE_* vars (file)" || echo "✗ STRIPE_* vars"
grep -q "stripe" package.json 2>/dev/null && echo "✓ Stripe SDK" || echo "✗ Stripe SDK" env | grep -q "STRIPE_" && echo "✓ STRIPE_* 环境变量" || grep -q "STRIPE_" .env.local 2>/dev/null && echo "✓ STRIPE_* 环境变量（文件中）" || echo "✗ STRIPE_* 环境变量"

Bitcoin: CLI + env

Bitcoin: CLI工具 + 环境变量

command -v bitcoin-cli >/dev/null && echo "✓ bitcoin-cli" || echo "✗ bitcoin-cli" env | grep -q "BITCOIN_" && echo "✓ BITCOIN_* vars" || grep -q "BITCOIN_" .env.local 2>/dev/null && echo "✓ BITCOIN_* vars (file)" || echo "✗ BITCOIN_* vars"
command -v bitcoin-cli >/dev/null && echo "✓ bitcoin-cli" || echo "✗ bitcoin-cli" env | grep -q "BITCOIN_" && echo "✓ BITCOIN_* 环境变量" || grep -q "BITCOIN_" .env.local 2>/dev/null && echo "✓ BITCOIN_* 环境变量（文件中）" || echo "✗ BITCOIN_* 环境变量"

Lightning: CLI + env

Lightning: CLI工具 + 环境变量

command -v lncli >/dev/null && echo "✓ lncli" || echo "✗ lncli" env | grep -q "LND_" && echo "✓ LND_* vars" || grep -q "LND_" .env.local 2>/dev/null && echo "✓ LND_* vars (file)" || echo "✗ LND_* vars"
command -v lncli >/dev/null && echo "✓ lncli" || echo "✗ lncli" env | grep -q "LND_" && echo "✓ LND_* 环境变量" || grep -q "LND_" .env.local 2>/dev/null && echo "✓ LND_* 环境变量（文件中）" || echo "✗ LND_* 环境变量"

BTCPay: env only

BTCPay: 仅检测环境变量

env | grep -q "BTCPAY_" && echo "✓ BTCPAY_* vars" || grep -q "BTCPAY_" .env.local 2>/dev/null && echo "✓ BTCPAY_* vars (file)" || echo "✗ BTCPAY_* vars"
undefined
env | grep -q "BTCPAY_" && echo "✓ BTCPAY_* 环境变量" || grep -q "BTCPAY_" .env.local 2>/dev/null && echo "✓ BTCPAY_* 环境变量（文件中）" || echo "✗ BTCPAY_* 环境变量"
undefined

Output Format

输出格式示例

markdown
undefined
markdown
undefined

Payments Audit

支付审计报告

P0: Critical

P0: 紧急级别

  • Stripe: Webhooks unverified (missing STRIPE_WEBHOOK_SECRET)
  • Bitcoin: RPC creds missing in prod
  • Stripe: Webhook未验证（缺少STRIPE_WEBHOOK_SECRET）
  • Bitcoin: 生产环境缺少RPC凭证

P1: Essential

P1: 重要级别

  • Lightning: LND_* vars missing
  • BTCPay: No webhook signature verification
  • Lightning: LND_* 环境变量缺失
  • BTCPay: 未配置Webhook签名验证

P2: Important

P2: 次要级别

  • Stripe: No idempotency keys
  • Bitcoin: No retry/backoff on RPC errors
  • Stripe: 未使用幂等键
  • Bitcoin: RPC错误未配置重试/退避机制

P3: Nice to Have

P3: 优化建议

  • Add payment analytics dashboard
  • 添加支付分析仪表盘

Provider Status

提供商状态

  • Stripe: Present
  • Bitcoin: Not detected
  • Lightning: Present
  • BTCPay: Present
  • Stripe: 已检测到
  • Bitcoin: 未检测到
  • Lightning: 已检测到
  • BTCPay: 已检测到

Summary

汇总

  • P0: 1 | P1: 2 | P2: 2 | P3: 1
undefined
  • P0: 1 | P1: 2 | P2: 2 | P3: 1
undefined

Related

相关命令

  • /check-stripe
  • /check-bitcoin
  • /check-lightning
  • /check-btcpay
  • /log-stripe-issues
  • /log-bitcoin-issues
  • /log-lightning-issues
  • /check-stripe
  • /check-bitcoin
  • /check-lightning
  • /check-btcpay
  • /log-stripe-issues
  • /log-bitcoin-issues
  • /log-lightning-issues