drivelous | Stripe Developers | Page 1

visual sandBOT Sep 16, 2022, 4:30 PM

#

narrow pelican Sep 16, 2022, 4:33 PM

#

Hi there! Just catching up on a few questions!

quartz mesa Sep 16, 2022, 4:34 PM

#

no problem! thank you all, you're all very fast and helpful

limpid thistle Sep 16, 2022, 5:16 PM

#

👋

#

You want to do a round trip to your server here

#

As you noted, we don't allow you to retrieve sensitive data about PaymentMethods client-side.

#

So you want to fetch your server, retrieve server-side, and send the data you want back to your client

#

Let me know if this doesn't clear things up @quartz mesa

quartz mesa Sep 16, 2022, 5:25 PM

#

totally clears things up, thank you. was hoping to avoid that because we have to make a request from our FE app -> graphql server -> monolith -> stripe to get that info

i'm curious why confirmCardSetup doesn't return that info direct? the user has just added their payment information in the input, it seems like a bit of a waste to force a fetch for that info

#

@limpid thistle like, even returning last4/name on account/brand/card type would be enough for us to populate that list view

limpid thistle Sep 16, 2022, 5:29 PM

#

Yeah the reason is that data is considered sensitive. Exposing it in the frontend allows malicious actors to access it

quartz mesa Sep 16, 2022, 5:37 PM

#

got it. thank you for your help @limpid thistle we'll build in something else so we aren't just relying on webhooks

#drivelous