#jacko-setupintent-params
junior sluice
hello! This is a picture of code, what do you need help with exactly
on line 70 I am attempting to add the customer id to this setup intent. It is a hard coded value for now bc I am testing it. In the future it will be a variable loaded into the client that depends on the specific user using the site
thick chasm
That can only be modified server-side. Also you should never trust the customer id from the client. An attacker could use someone else's id
junior sluice
Ok that answers my question thank you
thick chasm
So basically your line 70 is fine if you debug, but you never want this in your live application
junior sluice
Ok if I am deploying the stripe server on firebase functions Can I call a variable for the stripe customer id from my database? Will I need to keep deploying every-time the variable changes?
thick chasm
Well it doesn't make sense to have a variable like that