XTREME

[lone surge]

👋 happy to help

[slender seal]

Hi tarzan I hope you day goes well.

[lone surge]

thanks you too 🙂

Should we implement it on the client side?
you can't use the ExternalAccount API from the client side since it uses your secret_key which, under no circumstance, should be used in the front-end

you can collect the info on your front-end and pass them to your backend which then creates the account

or you can simply use the Stripe Onboarding if you don't want to reinvent the wheel and code all of this

[slender seal]

for security we have to use token base?

[slender seal]

The point is that we have a custom onboarding on app that users can add payment method similar to customer.

also the owner want that way to reinvent the wheel 🧐

[lone surge]

I'm sorry I didn't mean to offend

I'm just saying that it's more laborious and some users are not aware of the onboarding process and how they can integrate with it so we suggest it each time

maybe it was a poor choice of words from my end, so again I'm sorry

[slender seal]

you said the right things. however, it was so hard to convince the owner to use the stripe onboarding path.

[lone surge]

going back to the main topic, you should collect the info on the frontend and send them to the backend where you can use the API

[slender seal]

I don't get why u apologize.

I got ur point. so we have to use token API to generate a token and pass it into the server in a secure manner? am I right? pls correct me if i misundestood

[lone surge]

the bank account token can only be created on the backend

you need to pass in the information as raw text to your server, then create the bank account token https://stripe.com/docs/api/tokens/create_bank_account

then create an external bank account

https://stripe.com/docs/api/external_account_bank_accounts/create

[slender seal]

so we could not use this api on mobile app to create an token.
https://stripe.dev/stripe-ios/stripe/documentation/stripe/stpapiclient/createsource(with:completion:)-6w1jx

[lone surge]

this is only for customers

[slender seal]

I see, so we have to find out a secure way to pass this credential to the server-side like RSA cryptography.

Thanks very much, Tarzan for taking the time to respond.

[lone surge]

oh sorry my bad

I stand corrected

a colleague pointed out this https://stripe.dev/stripe-ios/stripe/documentation/stripe/stpapiclient/createtoken(withbankaccount:completion:)/

with is basically similar to the one used for customers but rather to create a token for bank accounts

you were on point @slender seal

[slender seal]

you welcome