#mexner
1 messages · Page 1 of 1 (latest)
Hi there, it's not recommended to directly use your connected account's secret key and publishable key in your integration. Instead you should use Stripe-Account header to make API calls for connected accounts (https://stripe.com/docs/connect/authentication)
Thanks Jack.
we will review our implementation to follow these best practices. In the short term, would our connected account rolling their publishable key - require us to update the publishable key we have saved in our system?
And... how can we connect to Stripe in Test mode using Stripe-Account header?
@woven blaze
Please go through the doc that I sent your earlier. It has details on how to use stripe-account header
Thanks @woven blaze - I see now, re: test mode.
Back to the the current implementation (which we will fix), in the short term, would our connected account rolling their publishable key - require us to update the publishable key we have saved in our system?