#AndroidDoctorr
1 messages · Page 1 of 1 (latest)
HI 👋
I'm sorry but I don't have the bandwidth to watch a video.
But client_secrets are designed to be safe to expose on the client
Oh? I thought you were only supposed to expose the publishable one, hence the name
I think you are confusing the Secret API key with the Payment Intent client_secret
The Secret API Key should absolutely never be exposed on the client. It provides complete access to your account
But the payment_intent.client_secret https://stripe.com/docs/api/payment_intents/object#payment_intent_object-client_secret is a property that is used on the client-side to link actions back to the Payment Intent created on the server.
well that helps me a bit, thank you. I guess I was confusing the two. I'm still trying to understand how this all works
No problem, that's why we're here. We have a relatively simple Android integration doc here: https://stripe.com/docs/payments/accept-a-payment?platform=android
If you wanted to work through it