#Naveen Sharma
warm sentinel
hybrid crescent
like I need to hold payment for security amount from 3d secure card
bright gyro
Just to make sure I understand - you want to collect card details and be able to charge this card later?
hybrid crescent
Yes for the first actual payment I will authenticate it via OTP/verification and I want to hold another payment after first payment completion which is basically security amount without authentication
mean to say hold payment from card without verification for 3d secure cards too
I have a example Getaround which is doing the same, but I am unable to understand how the are doing it
bright gyro
Is there a reason you want to do this in two separate payments? You should be able to do a single payment that just authorizes for a certain amount that can then be captured later
hybrid crescent
but in this case we have to complete authentication for 3d secure cards
I dont want authentication for security amount hold amount
bright gyro
Is the authorization for an amount something you expect to happen at any point in the future? (So you want to do authentication up front and then do the authorization later?)
hybrid crescent
Yes, I want to generate two payments at the same time. 1 will be actual charge and 2nd will be security amount. We will send card confirmation for only 1st transaction and after authentication we will hold 2nd payment as well without sending authentication for that payment.
bright gyro
Gotcha - so what you want to read is this (https://stripe.com/docs/payments/save-during-payment). Basically you'll want to create a Payment Intent w/ setup_future_usage: off_session (for the actual charge) which should generate a PaymentMethod that you can use to create an additional PaymentIntent that you use w/ separate auth and capture (https://stripe.com/docs/payments/place-a-hold-on-a-payment-method)
hybrid crescent
will this work for 3d secure cards too, like no authentication for second payment
bright gyro
When you use setup_future_usage for the initial charge the idea is that we should be gathering all the auth + information needed so that we don't need to do authentication again in the future and can request an exemption
It is always possible for the bank to reject that exemption and still request authentication, but this is the best way to make sure that you avoid unnecessary extra auths