John Brown

[smoky cobalt]

Hello. Thanks for answering.

[west pewter]

Generally, yes, but can you elaborate on

create the PaymentMethod inserting the card data

Are you using our Elements for this, or are you handling card details in your own systems and doing this in the back end too?

[smoky cobalt]

That's how it is. I use the methods of the Stripe .Net DLL.

Let me prepare an example

This is part of my test code

This is the method that creates the PaymentMethod

And this is the method that creates the PaymentIntent

[west pewter]

Ok, this works, but if you plan on handling card details like this in live mode you need to be aware of PCI implications:
https://stripe.com/docs/security/guide#validating-pci-compliance

Note the guidance under "API Direct"

We recommend using our Elements to collect payment details in the client

[smoky cobalt]

Excellent. That's exactly what I mean. In fact, the client I'm working on this for has PCI certification on their server.

[west pewter]

Ok then thats fine, but be aware they will need to provide some supporting documentation for their PCI status

And you may need to enable this setting:
https://dashboard.stripe.com/settings/integration

"Handle card information directly"

[smoky cobalt]

Does my client have to do any paperwork before you?

To notify you, because it must be he who does the necessary procedures to enable these direct collection methods.

And finally, in general and except for the review of the links that you send me, the methods that I send you in the images, are they correct?

[west pewter]

Yes that paperwork will be required when our support team reaches out to ask for it

[west pewter]

Yes those are all technically valid

You will need to determine how to handle 3DS authentication if applicable for your customers

[smoky cobalt]

Excellent. I will notify my client regarding this conversation. I appreciate your attention.