#naepostonsundays
graceful ore
frank quiver
It's always safer to use webhooks. Are you only accepting card payments? Do you plan to accept any other payment method types? Like, ACH, or SEPA for example?
dire hollow
Only card payments, either with the card element or the express one as I mentioned there. I def agree that it's safer to use webhooks too, it could be pretty easy for a bad actor to send a request to the return route but there are practical measures I could take. I suppose I'll just leave the return_url as a payment confirmation screen for UX and resort to the webhook as payment notification
frank quiver
That's definitely how I would do it
dire hollow
Cool, thanks for your advice. Appreciate your time