Kamesh | Stripe Developers | Page 1

wooden joltBOT Jan 20, 2023, 1:59 AM

#

mossy orbit Jan 20, 2023, 1:59 AM

#

hello! i'm not familiar with the term MFA, what does that mean?

zinc plume Jan 20, 2023, 2:00 AM

#

may be it's not called MFA in stripe. this is the one https://stripe.com/docs/payments/3d-secure

Card authentication and 3D Secure

Learn about authentication to reduce fraud and meet regulatory requirements.

mossy orbit Jan 20, 2023, 2:04 AM

#

The entire idea of performing 3DS on SetupIntents, is to setup your card properly for future payments. In most cases, users usually perform off_session payments

#

if you want to wait till the user performs payment to perform 3DS, why not save the card for future use only when the user makes payment then?

#

this might be helpful : https://stripe.com/docs/payments/save-during-payment

zinc plume Jan 20, 2023, 2:08 AM

#

we are confirming the card first, then get the card information back to calculate surcharge, then capture the payment once surcharge is added. so having 2 3ds check popping up is not a good UX. we are using off_session payments

#

we are not technically capturing it for future payments, the payments happens in the same user interaction

mossy orbit Jan 20, 2023, 2:11 AM

#

this is how i would go about it,

perform SetupIntent as usual
use a PaymentIntent with off_session=true to collect payment

#

this way, your payment wouldn't request for 3DS

#

https://stripe.com/docs/payments/save-and-reuse?platform=web#charge-saved-payment-method

zinc plume Jan 20, 2023, 2:12 AM

#

we are doing the exact same approach.

mossy orbit Jan 20, 2023, 2:12 AM

#

so you have a PaymentIntent still requesting for 3ds? can you share that PaymentIntent id?

zinc plume Jan 20, 2023, 2:12 AM

#

let me get it

#

pi_3MSABNL2zxs2bkLx0A2k6Hss

mossy orbit Jan 20, 2023, 2:29 AM

#

off_session wasn't set to true for that PaymentIntent

zinc plume Jan 20, 2023, 2:29 AM

#

let me double check with the team.

#

what should be the expectation if we set the off_session true while collecting payment as you suggested, when will the 3ds verification happens, in step 1 or step 2?

mossy orbit Jan 20, 2023, 2:34 AM

#

if you set off_session=true, you're indicating the the customer is off_session and isn't available to authenticate. So 3DS will not be requested for. In the rare scenario that the issuer requires 3DS, an error authentication_required will be thrown

zinc plume Jan 20, 2023, 2:38 AM

#

doesn't off_session defaults to true when not supplied?

#

note: we are using card element

mossy orbit Jan 20, 2023, 2:40 AM

#

no, it doesn't

zinc plume Jan 20, 2023, 2:43 AM

#

so do we explicitly supply off-session=true while making setupIntent

mossy orbit Jan 20, 2023, 2:44 AM

#

you're confusing SetupIntent with PaymentIntent

#

to clarify, the correct approach to this is to have 3DS with SetupIntent

#

then prevent 3DS with the PaymentIntent

zinc plume Jan 20, 2023, 2:46 AM

#

thanks.

mossy orbit Jan 20, 2023, 2:46 AM

#

SetupIntents have usage=off_session by default

#

for PaymentIntent, you should be passing in off_session=true

zinc plume Jan 20, 2023, 2:47 AM

#

got it. thanks

#

thanks for clarifying

#Kamesh