.rob_m

[midnight sage]

We have a Stripe App. We used to use the OAuth Connect, but have moved our permissions model to the Stripe App model. Our app requires invoice_read_write permissions, but we are unable to view connected account invoices on our dashboard. Is this a separate permission?

For question #2, I actually don't know if there is a permission that enables this. As far as I know, you can only see your own invoices in the dashboard

I have not played with Apps in a bit, when you connect with it, do the accounts appear in your connect accounts list on the dashboard? If so you may be able to view the dashboard as them and see the invoices that way https://dashboard.stripe.com/test/connect/accounts/overview

I will check in to the pending state aspect. I think it may be a matter of checking the Invoice's PaymentIntent's status

[runic copper]

Yes, the apps appear and I can "View Dashboard as X", the customer pages appear as you would expect, but it appears to be a perms issue just with invoices and payment intents

[midnight sage]

Interesting. Looking in to this and will get back to you with what I can find

[runic copper]

Thanks @midnight sage

[midnight sage]

For the pending status thing, you will need to check the Invoice's PaymentIntent's status. The dashboard's pending status for an invoice shows that the invoice's status is open and the intent's status is pending

I am still having trouble finding info on the permissions side of things. I will ask my colleagues about this and get back to you

[runic copper]

Re Invoice: that's perfect, thanks!

Re permissions: thanks, it seems like it started happening a few weeks ago if that's any help

[midnight sage]

Gotcha, definitely good to know. Is there a speciifc error that we give you when you try to the invoice or payment pages?

[runic copper]

On a request to https://dashboard.stripe.com/ajax/apps/devmode?include_only[]=id%2Cenabled%2Cdevmode.app_name%2Cdevmode.manifest.name%2Cdevmode.manifest.icon%2Cdevmode.manifest.permissions.permission%2Cdevmode.manifest.ui_extension.views.viewport%2Cdevmode.manifest.ui_extension.content_security_policy.connect_src%2Cdevmode.manifest.ui_extension.content_security_policy.image_src

I'm getting

{
    "error": {
        "message": "Connected account impersonation is not allowed on this endpoint.",
        "message_code": "connect_access_not_allowed"
    }
}

On data requests to pi objects, the error looks like this

{
    "error": {
        "code": "more_permissions_required_for_application",
        "message": "This application does not have the required permissions for this endpoint on account 'acct_18YzSgLzzyWFNXgN'. Having the 'read_only' scope would allow this request to continue.",
        "message_code": "more_permissions_required_for_application",
        "request_log_url": "https://dashboard.stripe.com/acct_18YzSgLzzyWFNXgN/logs/req_dqQZwmcIaVGbEF?t=1695648935",
        "type": "invalid_request_error"
    }
}

For context, our Stripe app includes all of the below perms

    {
      "permission": "payment_intent_read",
      "purpose": "..."
    },
    {
      "permission": "payment_intent_write",
      "purpose": "..."
    },
    {
      "permission": "invoice_read",
      "purpose": "..."
    },
    {
      "permission": "invoice_write",
      "purpose": "..."
    },

[midnight sage]

Gotcha, thank you for the detail. And would you mind sending me your own account ID as well (acct_1234)?

[runic copper]

Yes sir we're acct_1HUByaDMxIuutZDZ