JonnyJ

[cunning quarry]

hello!

1: Can a customer EVER see their subscription ID anywhere?

regarding the subscription id, i guess that's a question for how you coded your application also - are you displaying the subscription id anywhere?

2: Is there a safer method to go about this? I'm wondering if, since I create a new checkout session, I need to create a database table that checks for a checkout session and sub id, so the cancellation only goes through if these match. But that's a lot of work and its almost midnight and I'm tired.

You only want to cancel the subscription if it's been fully paid? if so, you can always do a check if the subscription has been fully paid yet before cancelling it?