rpatel8457 | Stripe Developers | Page 1

vital shadowBOT Jul 13, 2023, 3:39 PM

#

grizzled pagoda Jul 13, 2023, 3:39 PM

#

Can you explain more what you mean or what you're trying to do?
Generally no, that's not possible, but I'd like to hear more about the issue

bright dock Jul 13, 2023, 3:41 PM

#

So currently we are creating payment intent using our backend, but sending payment_intent id and secret on frontend for payment element to use.

Seems like some people have figured something out to use public key + payment intent id + patyment intent secret to do the card testing outside of our frontend.

#

Is this clear enough?

vital shadowBOT Jul 13, 2023, 3:47 PM

#

grizzled pagoda Jul 13, 2023, 3:49 PM

#

Right, so in this case you need to secure the endpoint which is exposing those client secrets

#

See here:

#

https://stripe.com/docs/disputes/prevention/card-testing#implement-controls

#rpatel8457