adnan | Stripe Developers | Page 1

gilded sirenBOT Oct 21, 2022, 4:42 AM

#

twin saffron Oct 21, 2022, 4:43 AM

#

It depends on the 3DS rules you set in the dashboard. You can refer to more details here: https://stripe.com/docs/payments/3d-secure#controlling-when-to-present-the-3d-secure-flow

silk zenith Oct 21, 2022, 4:45 AM

#

@twin saffron are these changes already applicable?

twin saffron Oct 21, 2022, 4:46 AM

#

Yes if you're using PaymentIntent or SetupIntent API

silk zenith Oct 21, 2022, 4:46 AM

#

Were users asked to update to these changes via email?

twin saffron Oct 21, 2022, 4:47 AM

#

This doesn't require changes to your integration

#

This is the change at the card scheme (visa, mastercard... etc)

#

If you're using PaymentIntents or SetupIntents API, 3DS2 has always been supported

silk zenith Oct 21, 2022, 4:51 AM

#

Understood! Can we get this data for last two weeks? I saw dashboard doesn't support custom date field ! We want to see if there is a drop in %

#

Also I am checking on radar/rules for the rules we use, can you please direct me which part of the pages will be applicable to look into the rules?

#

Apologies for small level help! I am new to using stripe

twin saffron Oct 21, 2022, 4:56 AM

#

Can we get this data for last two weeks? I saw dashboard doesn't support custom date field ! We want to see if there is a drop in %
This channel is for technical API integration. I'd recommend reaching out to our Support as they are the expert in getting data from dashboard: https://support.stripe.com/contact

Also I am checking on radar/rules for the rules we use, can you please direct me which part of the pages will be applicable to look into the rules?
Radar rules can be found in Dashboard > Payments > Rules under Fraud & Risk: https://dashboard.stripe.com/test/settings/radar/rules

For more details, you can refer to here: https://stripe.com/docs/payments/3d-secure#three-ds-radar

silk zenith Oct 21, 2022, 4:56 AM

#

p.s. we are facing some sever backlash from the users are the past a few days for the failed payments! so we are quire frustrated at the moment

#

There are three titles under this page:

Authentication rules / allow rules / block rules

Which one should I refer to for my enquiry sake?

#

@twin saffron

twin saffron Oct 21, 2022, 5:00 AM

#

For 3DS, it'll be under Authentication rules

silk zenith Oct 21, 2022, 5:01 AM

#

We have these rules in place! With these in mind, going back to my original question:

Do as a user I need to perform 3ds every time? Or is it a one-time event that happens when user connects their card with the platform?

forest plover Oct 21, 2022, 5:02 AM

#

👋 taking over here

silk zenith Oct 21, 2022, 5:03 AM

#

Thanks 🙇‍♂️

forest plover Oct 21, 2022, 5:05 AM

#

Um your 3D Secure looks a bit aggressive. Normally only the first one is needed

silk zenith Oct 21, 2022, 5:06 AM

#

How can the rest of two options impact UX?

forest plover Oct 21, 2022, 5:07 AM

#

It will require 3DS more often, as its name says, when 3DS is recommended or supported but not required

silk zenith Oct 21, 2022, 5:08 AM

#

We always had these conditions but we didn't face the issues we are facing right now

Users being asked to preform 3ds even they have been old platform users

#

And to make things more difficult for us, theur 3ds is failing or is incomplete

#

Anyways, so we can say with such rules - it is possible even an old time users may be asked to perform 3ds multiple times even when they are being an old user on a platform?

forest plover Oct 21, 2022, 5:14 AM

#

Yes it's possible. The issuer banks hold the last for aftermost decision to require 3DS or not (that's how they regulate, or being law-regulated in their country). The banks could have conformed to a new regulatory and enforce 3DS on all their customers.

#

To be able to look closer, do you have an example Payment Intent Id lately? I will look at the decline message

silk zenith Oct 21, 2022, 5:21 AM

#

Sure, brb on this

silk zenith Oct 21, 2022, 5:54 AM

#

pi_3LurB1HIt450iiBT1LP7VEuj
pi_3LuqcfHIt450iiBT0N0PwIEn
pi_3LuW5hHIt450iiBT0ZWmG0Dm
pi_3LtjlFHIt450iiBT0ppTviup

Frist round of payment intent ids!

#

@forest plover 🙇‍♂️

forest plover Oct 21, 2022, 5:56 AM

#

Are you from the same company with @fair solar ?

silk zenith Oct 21, 2022, 5:57 AM

#

yep

forest plover Oct 21, 2022, 6:00 AM

#

Ok pi_3LuqcfHIt450iiBT0N0PwIEn is different from the other 3. It triggered 3DS but the customer canceled from frontend.

The other 3 PIs was never attempted 3DS. They are created+confirmed on server-side, but after became require_actions, they are never sent back to client-side to attempt 3DS

#

Normally when you create+confirmed the PI server-side and Stripe tell you this require_actions, you will need to bring back your customer online, and let them authorize again by using our client-side SDK

silk zenith Oct 21, 2022, 6:04 AM

#

What could be the reason that these PIs were never sent to client side for 3DS?

(ideally we think these PIs shouldn't need 3DS because these are our old clients, who had done their 3ds when they connected their cards with us)

forest plover Oct 21, 2022, 6:09 AM

#

ideally we think these PIs shouldn't need 3DS because these are our old clients, who had done their 3ds when they connected their cards with us
I understand why you would think this way, but as explained above any card could be requested 3DS later, and the decision is ultimately hold by the banks. We recommend merchants to build a flexible integration that can always handle such a cases, not by assumption that "they shouldn't need 3DS because they have done"

#

There are various reason some bank could suddenly trigger 3DS. ie SCA in Europe or recurring regulation in India

silk zenith Oct 21, 2022, 6:09 AM

#

Ahh, understood 🙇‍♂️

#

Anyhow, why these PIs were not sent to client side for 3DS? where would problem lie for this behavior?

forest plover Oct 21, 2022, 6:12 AM

#

From Stripe view I can only see the logs, and from the logs there was no confirmation attempted in frontend

#

I think simply because you haven't built the handling logic for this case?

silk zenith Oct 21, 2022, 6:15 AM

#

When 3ds isn't triggered at all for PIs, which happens by the bank > what are we supposed to show on the client side for confirmation? and confirm what exactly when their is no 3DS from the bank side?

How can we handle such cases? What should our clients be seeing?

#

Thanks @forest plover this conversation is leading us somewhere - so we really appreciate your support 🙇‍♂️

forest plover Oct 21, 2022, 6:16 AM

#

Let's take pi_3LurB1HIt450iiBT1LP7VEuj for example. When you create + confirm it by https://dashboard.stripe.com/logs/req_IRPzhk7NHqjf0N

Stripe Login | Sign in to the Stripe Dashboard

Sign in to the Stripe Dashboard to manage business payments and operations in your account. Manage payments and refunds, respond to disputes and more.

#

Your code should look at the response next_action. Here it says use_stripe_sdk

#

You would want to build a page, using stripe.js 's handleNextAction and supply this PaymentIntent Id. Then you email your customer asking them to go back into that page.

#

1 min, I will find Document about handleNextAction

#

https://stripe.com/docs/payments/run-custom-actions-before-confirmation#next-actions this step

Run custom actions before confirming a payment

Build an integration where you can take an action between collecting payment details and payment confirmation.

#

You can look at its diagram. Your flow should start from here

silk zenith Oct 21, 2022, 6:23 AM

#

I see, let us take a look into our code and get back to you confirm if we are missing this bit to handle such cases 🙏

forest plover Oct 21, 2022, 6:24 AM

#

Sure. The key point, on server-side, whenever you see a require_actions PI, you should trigger this flow

silk zenith Oct 21, 2022, 6:25 AM

#

Meanwhile, can you please check what is the status of these two PIs on your side? 3ds is successful for these two but remains uncaptured?

pi_3LusDbHIt450iiBT1wTgcorg
pi_3LtoJoHIt450iiBT0BMyL06b

🙇‍♂️ 🙏

forest plover Oct 21, 2022, 6:27 AM

#

Yep correct. These are good, you just need to call Capture on them

fair solar Oct 21, 2022, 6:27 AM

#

forest plover You would want to build a page, using stripe.js 's `handleNextAction` and supply...

Hi @forest plover
Me again 😅
I think this part is handled by Stripe SDK ? Our app (CA) use Stripe SDK to do 3DS auth.

forest plover Oct 21, 2022, 6:27 AM

#

Normally uncaptured PI will expire in 7 days

#

@fair solar let's continue in our thread, sorry to mention you here

#

Oh I see, probably sever already send back to the app?

#

I doubt that the PI is lost somewhere between server and app then, or the customer never re-visit the app again

fair solar Oct 21, 2022, 6:31 AM

#

Yes, please refer to this video

#

This is a succeeded one.
I thought app will redirect user to three_d_secure url, and when they finish the auth, then Stripe will receive the result right

forest plover Oct 21, 2022, 6:32 AM

#

Which PI corresponding to that screen recording? Sorry both of you provided quite a lot of PIs and they are all different

silk zenith Oct 21, 2022, 6:35 AM

#

forest plover Yep correct. These are good, you just need to call Capture on them

Back here - However our system didn't call Capture for these PIs? So what could be the reason for that? Apologies for the information overload 🙇‍♂️

forest plover Oct 21, 2022, 6:38 AM

#

Um I am not sure? From Stripe's point of view I simply don't see the Capture call. When you create your PIs you have

  capture_method: "manual",

means you will need to call Capture somewhere

#

My suggestion is look at the code where should be sending Capture, and investigate on why it wasn't triggered for those 2 PIs

#

For example if you are calling Capture based on receiving a specific Webhook event.

silk zenith Oct 21, 2022, 6:45 AM

#

Ah understood! That's a solid action point on our side, let me get back to you ~

silk zenith Oct 21, 2022, 7:12 AM

#

@forest plover is there a chance to have an audio call with one of you guys?

forest plover Oct 21, 2022, 7:13 AM

#

Sorry we don't have phone support service but we are happy to help here

silk zenith Oct 21, 2022, 7:14 AM

#

I am trying to communicate this with my dev but can't make them understand! can you please make things easier to understand for us : #1032876081948139520 message

forest plover Oct 21, 2022, 7:22 AM

#

I would suggest using the Doc links. It has clearer diagram and explanation

silk zenith Oct 21, 2022, 7:27 AM

#

🙏🏽🙏🏽 🙏🏽

silk zenith Oct 21, 2022, 7:49 AM

#

Back with the second round (hopefully last) of PIs! Here is some context:

Sometimes our user would add extra requirements in their orders after the hold has been captured, in such scenarios their order price would increase from X to Y ! Our system is expected to charge Y amount to these customer however it is not able to charge the full amount to these users! Sample PIs:

pi_3LusqrEn1D9f60DB0goMhqFW
pi_3Ltll5En1D9f60DB1R98Egmy
pi_3LrXTcEn1D9f60DB0bcPRJmg
pi_3LrxtDEn1D9f60DB0HBYKnWb

@forest plover 🙇‍♂️

forest plover Oct 21, 2022, 7:51 AM

#

I am a bit confused. You mentioned "after the hold has been captured", so you already captured X, but now want to charge for (Y-X)?

silk zenith Oct 21, 2022, 7:53 AM

#

Want to charge the new price

#

Y

forest plover Oct 21, 2022, 7:54 AM

#

But then you will charge X + Y? That's overcharge

silk zenith Oct 21, 2022, 7:55 AM

#

We cancel the hold of X

#

And creates a new hold for this new price Y

forest plover Oct 21, 2022, 7:55 AM

#

That's before the capture, right? Because you said after the capture

#

Okie

#

All 4 PIs you provided succeeded and I am not sure if they was your charge for X or Y, and where is the error?

silk zenith Oct 21, 2022, 8:07 AM

#

For example for pi_3LusqrEn1D9f60DB0goMhqFW

The system was supposed to charge $643 ( price Y ) but instead it charged $570 (price X)! The reason being is 3DS attempt incomplete

tawny pelican Oct 21, 2022, 8:07 AM

#

Hi! I'm taking over this thread.

#

Give me a few minutes to catchup.

silk zenith Oct 21, 2022, 8:07 AM

#

Thanks Soma 🙇‍♂️

tawny pelican Oct 21, 2022, 8:09 AM

#

Yes, I can see that this payment required 3DS. This is up to the bank to request 3DS or not. And when the bank does request 3DS, you have to ask your user to come back to your website/app to confirm the payment and go though the 3DS flow with https://stripe.com/docs/js/payment_intents/confirm_card_payment#stripe_confirm_card_payment-attached

silk zenith Oct 21, 2022, 8:10 AM

#

So what happened in this case? Did user perform 3ds? Were we able to prompt user to perform 3ds on the front end side?

tawny pelican Oct 21, 2022, 8:12 AM

#

Here you created the PaymentIntent from your backend, and then nothing happened. So the call to confirm the PaymentIntent is missing.

silk zenith Oct 21, 2022, 8:15 AM

#

Pardon, this doesn't make things clear to me!
Bdw did this case happened to all of the above three PIs?

tawny pelican Oct 21, 2022, 8:19 AM

#

For pi_3LusqrEn1D9f60DB0goMhqFW, here's what you did and what is missing:

[done] Create the PaymentIntent on the backend, it had status: "requires_source_action"
[missing] ask the user to come back to your website/app and call confirmCardPayment() (link above) to start the 3DS flow
[missing] the user finishes the 3DS flow, and the PaymentIntent get status: "succeeded"

#

Bdw did this case happened to all of the above three PIs?
Can you share the PaymentIntent IDs?

silk zenith Oct 21, 2022, 8:20 AM

#

pi_3Ltll5En1D9f60DB1R98Egmy
pi_3LrXTcEn1D9f60DB0bcPRJmg
pi_3LrxtDEn1D9f60DB0HBYKnWb

tawny pelican Oct 21, 2022, 8:21 AM

#

Yes it's the same issue.

#

The bank is requesting 3DS, but you are not calling confirmCardPayment() to start the 3DS flow.

silk zenith Oct 21, 2022, 8:22 AM

#

What does missing mean here? It isn't part of the code? Or it didn't return the expected behavior?

#

Great help @tawny pelican 🙏

tawny pelican Oct 21, 2022, 8:26 AM

#

Your code created these PaymentIntent correctly. The bank, for whatever reason, decided that 3DS secure was required (because status: "requires_source_action"). So your code needs to handle that case by: (i) asking the user to come back to your website/app and (ii) call confirmCardPayment() (link above) to start the 3DS flow. So you need to review your Stripe implantation to make sure you handle (i) and (ii). Based on our log, you never called confirmCardPayment() for the PaymentIntent you shared.

#

(FYI I just edited my reply above with more context)

fair solar Oct 21, 2022, 8:48 AM

#

Hi @tawny pelican

But all the clients reported said they have started the 3DS flow.

We have our app (CA) using Stripe SDK to do 3DS, and the clients said they have encountered these issues.

1.complete 3DS and white blank page and can’t back to CA (keep spinning)
2.complete 3DS then no response, CA hang and need to kill app -> open CA again

As far as I know, the 3DS verification flow is handled by Stripe SDK right ? And Stripe will receive the result when 3DS verification finish.

So the missing part is between 3DS verification and the Stripe receiving the result. Is there a way to test ?

tawny pelican Oct 21, 2022, 8:52 AM

#

Give me a few minutes to look into this.

silk zenith Oct 21, 2022, 9:03 AM

#

Sure @tawny pelican - Please take your time ~

tawny pelican Oct 21, 2022, 9:04 AM

#

Could you share more details about your integration? Like can you share the code you are using to create the PaymentIntent and handle 3DS currently?

silk zenith Oct 21, 2022, 9:04 AM

#

@fair solar

fair solar Oct 21, 2022, 9:12 AM

#

@tawny pelican
We logs the request sent from CA, it sends request to here: https://api.stripe.com/v1/payment_intents/pi_3LvGMlHD3HubdpRJ0dL4iq4b?client_secret=pi_3LvGMlHD3HubdpRJ0dL4iq4b_secret_8L8eSIKLhmUNIk8KGofhpqdXD

and CA will get response like this:

    "amount": 15500,
    "amount_details": {
        "tip": {}
    },
    "automatic_payment_methods": null,
    "canceled_at": null,
    "cancellation_reason": null,
    "capture_method": "manual",
    "client_secret": "pi_3LvGMlHD3HubdpRJ0dL4iq4b_secret_8L8eSIKLhmUNIk8KGofhpqdXD",
    "confirmation_method": "automatic",
    "created": 1666340047,
    "currency": "hkd",
    "description": "HK Transport Order #<To be confirmed>",
    "id": "pi_3LvGMlHD3HubdpRJ0dL4iq4b",
    "last_payment_error": null,
    "livemode": false,
    "next_action": {
        "type": "use_stripe_sdk",
        "use_stripe_sdk": {
            "source": "src_1LvGMlHD3HubdpRJNNVsKdtI",
            "stripe_js": "https://hooks.stripe.com/redirect/authenticate/src_1LvGMlHD3HubdpRJNNVsKdtI?client_secret=src_client_secret_ebO3jns1VzKqA4GlNX0k72HB&source_redirect_slug=test_YWNjdF8xQmczVjFIRDNIdWJkcF
JKLF9NZVpWTmxZQW5FRG9PQjljM2JxVzI2WWZmajBMZkdv0100YVPygcTo",
            "type": "three_d_secure_redirect"
        }
    },
    "object": "payment_intent",
    "payment_method": "pm_1LvEGjHD3HubdpRJr00xYOXi",
    "payment_method_types": [
        "card"
    ],    "processing": null,
    "receipt_email": "qa4@gogotech.hk",
    "setup_future_usage": null,
    "shipping": null,
    "source": null,
    "status": "requires_action"
}

And then can see the 3DS authentication page, and during the authentication and , it's not handled by our side right ?

The integration code will be provided later 🙏

tawny pelican Oct 21, 2022, 9:19 AM

#

And what do you do with that API response? Do you look at the information inside next_action.use_stripe_sdk to start the 3DS flow on your own?

silk zenith Oct 21, 2022, 9:21 AM

#

@tawny pelican we are in another meeting at the moment, let us get back you in a while! please stay tuned

fair solar Oct 21, 2022, 9:43 AM

#

Hi @tawny pelican
I'm still gathering the informations 🙏

Thanks

timid hare Oct 21, 2022, 9:45 AM

#

Hey, taking over here. Let me know if there's any follow-up Qs I can answer!

fair solar Oct 21, 2022, 9:59 AM

#

Hi @timid hare
This is our code in iOS

import Foundation
import Stripe

protocol StripePaymentProtocol {
    var publishableKey: String? { get set }
    var connectAccountId: String? { get set }

    func confirmPayment(
        clientSecret: String,
        context: STPAuthenticationContext,
        completion: @escaping Stripe.STPPaymentHandlerActionPaymentIntentCompletionBlock
    )
}

extension STPPaymentHandler: StripePaymentProtocol {
    var publishableKey: String? {
        get {
            Stripe.STPAPIClient.shared.publishableKey
        }
        set {
            Stripe.STPAPIClient.shared.publishableKey = newValue
        }
    }

    var connectAccountId: String? {
        get {
            STPAPIClient.shared.stripeAccount
        }
        set {
            STPAPIClient.shared.stripeAccount = newValue
        }
    }

    func confirmPayment(
        clientSecret: String,
        context: STPAuthenticationContext,
        completion: @escaping Stripe.STPPaymentHandlerActionPaymentIntentCompletionBlock
    ) {
        let params = STPPaymentIntentParams(clientSecret: clientSecret)
        params.returnURL = "ggv://stripe" // for webview fallback
        STPPaymentHandler.shared().configUI().confirmPayment(params, with: context, completion: completion)
    }
}

silk zenith Oct 21, 2022, 10:00 AM

#

Thanks @timid hare - Looking to get your help for the closure 🙏

fair solar Oct 21, 2022, 10:01 AM

#

It should be this line to use Stripe SDK @timid hare

STPPaymentHandler.shared().configUI().confirmPayment(params, with: context, completion: completion)

timid hare Oct 21, 2022, 10:12 AM

#

Thanks for sharing all of these details, give me couple of minutes while I check this please

fair solar Oct 21, 2022, 10:12 AM

#

Thank you

silk zenith Oct 21, 2022, 10:31 AM

#

Sure @timid hare - Take your time 🙏

mellow crane Oct 21, 2022, 10:38 AM

#

Hey, checking in here. This issue will require an in-depth investigation from our team in order to figure out the root cause. Can we ask that you write in to us via https://support.stripe.com/contact, providing as much detail and context as possible (you can also reference this thread).

silk zenith Oct 21, 2022, 10:41 AM

#

What is the expected time that will be take on stripe side for this in-depth investigation?

mellow crane Oct 21, 2022, 10:46 AM

#

I can't offer a specific timeline, but the more detail you can provide will help us debug this in a timely manner

#

Also, if you check the 'developer' box when writing in it will come straight to our team

silk zenith Oct 21, 2022, 11:18 AM

#

Okay sure, our in-depth ticket is coming your way! @fair solar is on it ~

mellow crane Oct 21, 2022, 11:19 AM

#

Thank you!

#adnan