#Velix

1 messages ยท Page 1 of 1 (latest)

deep smeltBOT
vapid shale
#

Stripe doesn't return IP address in API response or events

old tangle
#

Oh, that's bad. Because the checkout-URL can be copied to another computer and the order might be placed there. We need to store the order IP address (from the checkout process) ๐Ÿ˜ฆ

#

Is there no breakout or expansion?

vapid shale
#

Unfortunately retrieving IP address is not possible with API or event even with expansion

sand pagoda
#

Why can you not capture the IP address before sending them to the Checkout page?

old tangle
#

Because it can be different. You can copy the URL to another computer in another network. An evil person could create a session from IP-1 and place the order with a stolen credit card from IP-2. When we store IP-1 only, there hasn't been anything evil up to this point.

#

The fraud has been done on IP-2.

vapid shale
#

After customer completes the payment, it'll be redirected to your success_url. You probably can retrieve IP address from your page in success_url.

old tangle
#

yeah, I just thought the same, using {CHECKOUT_SESSION_ID}

#

thanks for the hint. I'll play with it.

#

I hope he won't surpress the redirection 301/302

vapid shale
#

No problem! Happy to help ๐Ÿ˜„