nick-cvc-recollection

[glad siren]

You cannot see the CVC value, no

You can see if it was checked and the result for a given payment here:
https://stripe.com/docs/api/charges/object#charge_object-payment_method_details-card-checks-cvc_check

[granite trout]

What about outside of the payment process? We are wanting to check the CVC before going to charge the card.

[glad siren]

You can't do that

You can recollect it if you like: https://stripe.com/docs/payments/save-during-payment-cards-only#web-recollect-cvc

[granite trout]

👀

Hmm the flow we want to do this in is confirming the payment intent from the backend. Is there any API version of sending CVC to confirm payment that is not via the Stripe SDK?

I see this, but how do we convert the CVC into a token? https://stripe.com/docs/api/payment_intents/confirm#confirm_payment_intent-payment_method_options-card-cvc_token

[glad siren]

Hmm trying this out, given me a few min

[granite trout]

great, thank you! 🙂

[glad siren]

Ok, it doesn't seem like this can be tokenized by itself
You need to supply it as a confirmation parameter as far as I can tell

[granite trout]

Hmm, I don't follow exactly, what do you mean? You mean I can provide cvc as a confirm parameter directly somehow?

Would you be able to share an example request?

[glad siren]

Yea, if you had an existing payment method ID, you could present a CVC Element then supply that during confirmPardPayment"

stripe.confirmCardPayment(
      data.client_secret,
      {
        payment_method: data.pm,
        payment_method_options: {
          card: {
            cvc: cvcelem,
          }
        },
      }
    )

https://stripe.com/docs/js/elements_object/create_element?type=cardCvc

[granite trout]

ok but this is happening from the backend, we don't have access to the card element. but we do have the actual CVC number

[glad siren]

Ah, I see. Let me look again in that framing.

Just want to raise that you should be aware of PCI implications of this, if you aren't already: https://stripe.com/docs/security/guide#validating-pci-compliance

[glad siren]

ok @granite trout -- finally got this working like i think you need

You'll need to create a CVC Update token first: https://stripe.com/docs/api/tokens/create_cvc_update#create_cvc_update_token-cvc_update-cvc

Then you can use that when confirming the payment intent with a known payment method via payment_method_options:
https://stripe.com/docs/api/payment_intents/confirm#confirm_payment_intent-payment_method_options-card-cvc_token