squanchy-checkout-firebase

[pine wharf]

Hello 👋
Things are running a bit busy on the channel. I've asked a colleague to take a look.
They will join shortly

[vague hound]

No worries :D

[inner hemlock]

hey there!

What is success.tsx in this context?

Most likely this is something you want to do in a wehbook handler following checkout.session.completed events

you can trigger it on your success page, but if you do that I'd recommend you explicitly retrieve the session from the Stripe API by ID to confirm it completed successfully, instead of trusting the client page load

ie, a malicious user could skip paying at checkout and just go to your success page with the session ID in the URL to pretend they've paid

Using Checkout webhook events or retrieving the session defends against this