Run Stripe webhook : installing CLI -> Mac Security

[Mennovandijk]

I am trying for hours how to get the Stripe CLI installed on my Mac.
In Wappler I switch to the Strip Webhook tab and automatically the Stripe CLI installation starts.
But it gets halted by Mac OS security.

Only when I press cancel in the popup, the allow anyway button appears.
Running the installer again, same thing happens

Does anybody know how to make this work??

[Apple]

On the last screenshot, if you click the button “Allow Anyway” I think it should work

[Mennovandijk]

@Apple Normally yes, but the loophole is that this ‘Allow Anyway’ button only appears when I cancel the popup.

[Mennovandijk]

Ok, finally got it working by doing the following steps:

• When the popup appears press the ‘move to bin’ button
• Open your bin and drag the ‘Stripe’ executable to your desktop
• Double click it
• Then again in your Security & Privacy settings the ‘Allow anyway’ button appears. Clicking it now continues to install the Stripe CLI

Now in Wappler activating the Stripe Webhooks tab should work

[Apple]

@George

Apple quarantine issue

[George]

weird we use the command:

brew install --no-quarantine stripe/stripe-cli/stripe

so quarantine should be removed…

[Apple]

Back to the roots

“stripe” can’t be opened because Apple cannot check it for malicious software

I had a hard time fixing it, refer to my topic: @George I recommend stop doing “brew install” automatically due to this issue Edit: Try running this in the Terminal: sudo xattr -d com.apple.quarantine $(which stripe)

If this happened with Stripe, it'll also happen with NodeJS - which I had a (very) hard time fixing it:

MacOS gatekeeper issue (Big Sur)

Hi, Just installed Wappler and did a “System check” so it started to install NodeJS and a couple other stuff. I had brew installed previously so it seems Wappler used that. The problem is, Gatekeeper prevents the node binary from executing “because it’s not possible to verify the programmer”. I have manually added an exception for the node binary but it now complains about “libuv.1.dylib”, which I’m pretty sure it’s a NodeJS dependency. I’m now attempting to re-install things directly from th…

I had to xattr all files written by NodeJS installation, it was really messy

[George]

well the --no-quarantine flag on homebrew should be doing the xattr for us.

With node npm there is a different story - there indeed we might do it ourselves but happily we don’t install many binary modules there. And now that we deliver those few binaries within wappler with the build in wappler node sevrer - it is no longer really necessary.

@Mennovandijk are you using the latest Wappler?
Maybe try to update homebrew first.

[Mennovandijk]

@George I got it working with the work-around I posted

[cpuser]

Thanks @Mennovandijk I was stuck on the same thing.

[bpj]

@george there still seems to be a quarantine issue in 4.9.1 but the above workaround no longer seems to be an option.

I don’t have the option of Move to Bin any more:

Choosing Show in Finder briefly shows the file but it seems to be automatically deleted as the Wappler/Homebrew process continues.

The only way of getting around it now is to

• Have it run
• Choose Open In Finder
• Keep the Finder window open while it is run again (DON’T CLICK EITHER OPTION IN THE ABOVE DIALOGUE)
• From the finder window that you opened earlier, find the Stripe folder and open the subfolders until you get to the executable file and copy it to your desktop
• Now click the OK button in the dialogue
• Open the stripe executable from your desktop
• Now you should be able to run the Webhooks terminal in Wappler

[George]

Just install the stripe CLI manually, see:

https://stripe.com/docs/stripe-cli

[bpj]

That’s not the point, I presume Wappler should be able to do it and something isn’t working quite right

[George]

Well we execute the same command so I was wondering if it was a permission issue because it is done from within Wappler or is it always the case even if executed from a terminal outside?

If it works from outside - then we will remove the automatic installation and provide manual instructions.

[bpj]

Is there any way to get Homebrew to wait for permission before proceeding/deleting the CLI executable?

[George]

What permission do you mean?

[bpj]

The Mac quarantine. Don’t worry, thinking about it, that wouldn’t work…

It’s just when you click the Show In Finder button on the prompt, Homebrew continues and because it has ‘failed’ and deletes the executable - I just thought there might be a way of interrupting that deletion but I can’t think of how you could do it

[Apple]

Till this problem is solved I suggest Wappler to disable automatic installation of stuff

Last time I had a really bad experience with NodeJS installation, and from the looks of it not many people complain because of the built-in NodeJS server doesn’t require NodeJS installed

[George]

I’m happy to report that after a lot of investigating and cooperation with the homebrew team, we found the right way to officially and secure install the needed components.

So starting from the next update, there will be no warnings that Apple cannot check this software and everything will install just fine.