collectooor

[robust slate]

Also I haven’t completed activating my payments is that required for a live production environment

[north socket]

Publishable and Secret keys are not the same things

We have separate Test versions of both

And you should never have your secret key in any front-end code

I would start by reading this: https://stripe.com/docs/test-mode

[robust slate]

Okay thank you regarding the secret keys in my front end code- I’m calling the Stripe keys from my .env file is that not an appropriate practice ?

Or do you have any information I can look at for that vulnerability

[north socket]

On the front-end you should be using your publishable keys

[robust slate]

So what is the purpose of secret keys

[north socket]

To perform work on the server

[robust slate]

I see so in production do I still use the publishable keys in my front end code

And then do I just switch to live mode instead of test

[north socket]

Correct

[robust slate]

Ohh okay that makes sense

Thank you for the help

One last question do I have any way to test live mode without accepting payments

[north socket]

Test mode is how you test

So no, there isn't a way to "test" in Live mode without accepting payments

[robust slate]

Alright thank you for answering my question sorry if they were dumb

[north socket]

No worries! It can be a lot to wrap your head around