brianzammit_34972

[low tartan]

So you want to handle 3DS without using stripe.js ?

[wintry geode]

yes. We want to do the entire payment method collection without stripe js, including the 3Ds flow

[low tartan]

https://stripe.com/docs/payments/3d-secure#when-to-use-3d-secure

[wintry geode]

Thanks @low tartan This seems to be what we were looking for.

The only thing that I'd like to confirm is this form the doc: Stripe.js collects basic device information during 3D Secure 2 authentication and sends it to the issuing bank for their risk analysis.

If we use redirects rather than stripe js, do we need to handle this basic device information manually? Or is it handled by the URL that we are asked to redirect to?

Thanks

[normal jacinth]

it's handled for you(there's an intersitial page that runs some JS to collect signals before redirecting)

to be clear though, do not redirect to the URL inside use_stripe_sdk, ever. That part of the API is subject to change at any time and might not have a URL in many cases or in future

if you want to handle the redirect yourself you need to pass return_url so that the next_action type that's returned is redirect_to_url and then there's a URL you can read from there and redirect to

[wintry geode]

Thank you for your prompt replies, and spot on answers 👏