#krutarth
rapid tinsel
pine garden
I don't know what you mean by validity
regal matrix
does clientSecret expires?
pine garden
Not that I know of, no.
regal matrix
So basically I would be able to store the clientSecret in the database and use it later right?
pine garden
Yup!
regal matrix
Alright, and if it gets leaked, what possible repurcussions may happen?
pine garden
It's more or less available to people via the browser when they check out, so it's not entirely hidden all the time. It doesn't have a huge material impact most of the time, but some bad actors can use it to do card testing if you haven't used any other mitigation strategies: https://stripe.com/docs/disputes/prevention/card-testing
