martyna - confirm after 3DS | Stripe Developers | Page 1

opal stoneBOT Dec 19, 2022, 7:17 PM

#

coarse elm Dec 19, 2022, 7:18 PM

#

martyna

#

You said: hi, we at Recruitee had this issue in production as well - we have 200 respnse on payment_intent, but we got 404 on Request URL: https://hooks.stripe.com/csp-report?p=three_d_secure%2Fauthenticate Request Method: POST Status Code: 404 csp-report : {,…} blocked-uri : "wasm-eval" column-number : 218267 disposition : "enforce" document-uri : "https://hooks.stripe.com/three_d_secure/authenticate?client_secret=src_client_secret_1IWDMZmJPuay4CvUSAshLp2l&livemode=false&merchant=acct_15OzyvHpcg3Dmd9G&return_url=https%3A%2F%2Fhooks.stripe.com%2Fredirect%2Fcomplete%2Fsrc_1MGonJHpcg3Dmd9GC49VTPMU%3Fclient_secret%3Dsrc_client_secret_1IWDMZmJPuay4CvUSAshLp2l%26source_redirect_slug%3Dtest_YWNjdF8xNU96eXZIcGNnM0RtZDlHLF9OMHFVNGdOajVyVW5GM010WEZmdmVzY0NRa0JJT1ln0100N3CCKrXP&source=src_1MGonJHpcg3Dmd9GC49VTPMU&source_redirect_slug=test_YWNjdF8xNU96eXZIcGNnM0RtZDlHLF9OMHFVNGdOajVyVW5GM010WEZmdmVzY0NRa0JJT1ln0100N3CCKrXP&usage=single_use" effective-directive : "script-src" line-number : 2 original-policy : "report-uri /csp-report?p=three_d_secure%2Fauthenticate; connect-src 'none'; manifest-src 'none'; media-src 'none'; object-src 'none'; base-uri 'self'; font-src 'self'; img-src 'self' https://q.stripe.com/; script-src 'self' https://js.stripe.com/ 'report-sample'; style-src 'self'" referrer : "https://js.stripe.com/" script-sample : "" source-file : "chrome-extension" status-code : 200 violated-directive : "script-src"

#

Yep can you provide the request ID for that 404?

#

Hmm wait

#

You are seeing a 404 upon redirecting to handle 3DS?

wooden pebble Dec 19, 2022, 7:19 PM

#

and then our api has a response that. the card was declined
payment_processing_failed

#

this is with using your test 3ds secure and 3ds 2 secure cards on test env but we have this issue since 9.12 and support is constantly closing the issue 🙈 and we simply do not know what to tell our customers as they are using 3ds secure required cards in prod as well

coarse elm Dec 19, 2022, 7:22 PM

#

Gotcha

#

Can you provide me an example PaymentIntent that I can look at?

wooden pebble Dec 19, 2022, 7:23 PM

#

sure

coarse elm Dec 19, 2022, 7:23 PM

#

Thanks, give me a moment

wooden pebble Dec 19, 2022, 7:24 PM

#

then Stripe modal appears (and i click confirm or fail - doesn't matter actually) and it is followed by csp hooks 404 and then purchase fails

coarse elm Dec 19, 2022, 7:26 PM

#

Okay so for that example it is using the manual_confirmation flow

#

So that means that after 3DS is completed on the client, you must confirm again on the server to complete the payment

wooden pebble Dec 19, 2022, 7:28 PM

#

but i assumed when testing 2 cards from your documentation they should be passing the confirmation 👀 in that case should we do something?

coarse elm Dec 19, 2022, 7:28 PM

#

I'm not sure what you mean exactly?

wooden pebble Dec 19, 2022, 7:30 PM

#

i mean what we can do to prevent such issues - 3ds secure cards are not passing confirmation (stripe test cards) and our customers on production

#

those two Rita mentioned, they are not working and we saw that in production logs as well

coarse elm Dec 19, 2022, 7:32 PM

#

They do pass confirmation, you just aren't completing the payment after confirmation is succesful. You need to call https://stripe.com/docs/api/payment_intents/confirm to confirm from your server after 3DS is completed in order to complete the payment

Stripe API reference – Confirm a PaymentIntent – curl

Complete reference documentation for the Stripe API. Includes code snippets and examples for our Python, Java, PHP, Node.js, Go, Ruby, and .NET libraries.

wooden pebble Dec 19, 2022, 7:33 PM

#

ok so we should call paymentIntent twice, am i correct?

#

before, and after confirmation?

coarse elm Dec 19, 2022, 7:34 PM

#

Yep, let me find the docs. One sec

wooden pebble Dec 19, 2022, 7:36 PM

#

right now, we have paymentIntent 200, csp stripe hooks for 404, subscription not purchased card declined - patch 422

#

and the proper way should be paymentIntent 200, csp stripe hooks 200, paymentIntent 200 (second), and then patch should pass?

coarse elm Dec 19, 2022, 7:38 PM

#

Let's back up a sec

#

So you are completing 3DS using handleCardAction, correct?

wooden pebble Dec 19, 2022, 7:42 PM

#

honestly idk i am QA not dev, but gimme few mins maybe i'll find it 😄

#

yes, we do

#

we use handleCardAction

coarse elm Dec 19, 2022, 7:43 PM

#

Okay I'm confused by the fact that you are seeing a 404 for card declined. The examples you have provided me have not been declined

#

They just haven't been completed yet

wooden pebble Dec 19, 2022, 7:45 PM

#

ye i know, we are confused since 9th of december when i found it 😄 we do not have any idea why this is happening (especially when those are stripe test cards from your documentation with outcome OK)

#

and we are more even confused why 3ds cards worked before on production and stopped working last week 😄

#

3DS2 Required OK 4000000000003220 3D Secure 2 authentication must be completed for the payment to be successful. By default, your Radar rules request 3D Secure authentication for this card.
3DS Required OK 4000000000003063 3D Secure authentication must be completed for the payment to be successful. By default, your Radar rules request 3D Secure authentication for this card.

#

so in test mode - after clicking FAIL or COMPLETE AUTH there is always the same reason - card declined

coarse elm Dec 19, 2022, 7:55 PM

#

Is there somewhere we can reproduce this?

wooden pebble Dec 19, 2022, 7:56 PM

#

yes, i can do this on out testing env

coarse elm Dec 19, 2022, 7:57 PM

#

Is there a link we can go to and see it ourselves?

wooden pebble Dec 19, 2022, 7:57 PM

#

do you have access to recruitee logs in stripe? I dont 🙈

ocean garden Dec 19, 2022, 7:59 PM

#

Do you have other radar rules in place that might be blocking payments? Are there any details in the outcome that provide context for you?
https://stripe.com/docs/api/charges/object#charge_object-outcome

Stripe API reference – The charge object – curl

Complete reference documentation for the Stripe API. Includes code snippets and examples for our Python, Java, PHP, Node.js, Go, Ruby, and .NET libraries.

wooden pebble Dec 19, 2022, 8:02 PM

#

let me check the code, and do you have access to stripe logs of recruitee testing env? i can also manually reproduce and all of it will be in stripe (as we checked them last week in stripe as well)

#

no i don't see any outcome usage

ocean garden Dec 19, 2022, 8:09 PM

#

If you can share example request IDs or payment intent ID yes I can inspect those details

wooden pebble Dec 19, 2022, 8:17 PM

#

im using this card from you Test documentation: 3DS Required OK 4000000000003063 3D Secure authentication must be completed for the payment to be successful. By default, your Radar rules request 3D Secure authentication for this card.

#

and i chose Complete auth on stripe modal

#

ocean garden Dec 19, 2022, 8:27 PM

#

Ok this looks to be successful, but you need to confirm the payment again after the 3ds auth

#

Because you're using manual confirmation

#

Try calling this again: https://stripe.com/docs/api/payment_intents/confirm

Stripe API reference – Confirm a PaymentIntent – curl

Complete reference documentation for the Stripe API. Includes code snippets and examples for our Python, Java, PHP, Node.js, Go, Ruby, and .NET libraries.

wooden pebble Dec 19, 2022, 8:30 PM

#

but where? should i log in to stripe and then confirm it? how and where i can confirm it on our test env?

ocean garden Dec 19, 2022, 8:36 PM

#

With the API, you can use eg curl or whatever SDK you prefer

#

martyna - confirm after 3DS

wooden pebble Dec 19, 2022, 8:57 PM

#

we have a confirmation in API 🙈

#

we DO NOT confirm if we have account balance less or equal 0 or paymentIntent is not available

inland spindle Dec 19, 2022, 9:01 PM

#

Hello 👋
Taking over for synthrider as they had to step away
Let me know if you have a follow up question 🙂

wooden pebble Dec 19, 2022, 9:05 PM

#

Hello, yeah i do 🙈 , could you see my last few messages in the thread 😅 it would be helpful

inland spindle Dec 19, 2022, 9:08 PM

#

I see the messages but I'm not sure what your question is as this is a long running thread 🙂
Would you mind writing a quick summary of your current state and the question?

wooden pebble Dec 19, 2022, 9:14 PM

#

sorry, no thank you. we were trying to reach via customer support since 9th of december and we were ghosted 😄 and today i don't have energy for that to do it all over again 😅 we will probably be back after xmas/new years eve tho. Have a nice evening/night/day. And happy holidays

inland spindle Dec 19, 2022, 9:15 PM

#

NP! 🙂 Happy Holidays to you too!

wooden pebble Dec 19, 2022, 9:16 PM

#

thanks and sorry for being a pain in the 🍑 👋

inland spindle Dec 19, 2022, 9:17 PM

#

all good!

#martyna - confirm after 3DS