#Naveed | Web3Auth

1 messages · Page 1 of 1 (latest)

gray vergeBOT
void ravine
winter flume
#

oh nice

#

i wonder if metadata can store images too? cuz our admins may also upload things like receipts

#

e.g. pdf receipts

#

or am i only going to be able to reference the images via urls

void ravine
#

No, you can't attach an image to metadata directly, but yes you can attach image urls.

winter flume
#

does stripe provide any sort of generic image storage or should i consider other solutions like s3

#

image/pdf

#

only reason we were considering this point is because stripe is secure when it comes to financial data

void ravine
winter flume
#

in purpose there doesnt seem to be anything regarding e.g. bank transfer proof

#

cuz we want to mark invoice as paid out of band

#

and also attach the relevant bank transfer pdf

void ravine
#

Yes are right, the file API is designed for certain purposes, and the proof for paid out of band invoice is not one of them.

winter flume
#

ok got it, then using it for that purpose wouldn't be the idiomatic way to go about things

#

why do docs say not to put any confidential info in invoice metadata

#

"Don't store any sensitive information (bank account numbers, card details, and so on) in metadata or in the description parameter."

#

i dont think metadata field is exposed to actual. users

#

only stripe dashboard users can see that

void ravine
#

Yes you are right. I guess the concern here is that the Dashboard (or API response) can be accessed by many people within your org so there's a risk that sensitive info may leak out if many people can see the invoice's metadata.

winter flume
#

i get what u mean

#

its like something the programmer may not be aware of and accidentally expose it since he/she might just return it as response

#

thanks for the help!