mochihealth

[loud marten]

so whenever I create a subscription i make a post request to my backend which calls the stripe api to create it which subsequently returns a client-secret in the subscription.latest_invoice.payment_intent.client_secret

I then send that client secret back to the client however i am wondering where i should store that client secret in the event of a hard refresh

?

[sturdy lodge]

You shouldn't store the Client Secret. It's intended to be single-use while an end-user is on-session

[loud marten]

but what if there is a hard refresh in between