abbas-connect-oauth | Stripe Developers | Page 1

sturdy fulcrumBOT Feb 9, 2024, 3:51 PM

#

Hello! We'll be with you shortly. Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.

thefirstharpy, 2 days ago, 19 messages

prime crest Feb 9, 2024, 3:52 PM

#

Hi 👋 no, as far as I'm aware there is no way to filter Connected Accounts based on how they were connected to your Platform.

median ivy Feb 9, 2024, 4:01 PM

#

like i have the connected account id

#

and when i call this api https://api.stripe.com/v1/accounts i dont see it?

prime crest Feb 9, 2024, 4:07 PM

#

Can you elaborate? Are you adjusting the limit and/or paging through all the results to make sure you look at all of your Connected Accounts?

median ivy Feb 9, 2024, 4:15 PM

#

i want to see if this account is connected to me or not

#

also in future i might need to display a list

prime crest Feb 9, 2024, 4:17 PM

#

You're using the right endpoint then.
If the Account ID is not in the list of Connected Accounts, then it is not connected to your Platform.

median ivy Feb 9, 2024, 4:19 PM

#

im using this: https://stripe.com/docs/connect/oauth-standard-accounts

Using OAuth with Standard accounts

Use the OAuth connection flow to allow a Standard user to connect to your platform.

prime crest Feb 9, 2024, 4:22 PM

#

I'm sorry, I'm very lost. What are you trying to ask here? If the Account ID you have is not returned when you list all of your Connected Accounts (including paging through all results) then it's not connected to your Platform. Do you think you have an example that contradicts that, can you share more specifics?

median ivy Feb 9, 2024, 4:37 PM

#

ok sharing

#

not found on this list

#

not here as well

prime crest Feb 9, 2024, 4:44 PM

#

What is the Connected Account ID you expect to be connected to your Platform, and what is your Platform Account ID?

median ivy Feb 9, 2024, 4:45 PM

#

is sharing them okay here?

prime crest Feb 9, 2024, 4:45 PM

#

Yes, they aren't sensitive, but if you'd rather share them in a private discussion you can discuss this further with our Support team in a ticket:
https://support.stripe.com/?contact=true

Stripe: Help & Support

Find help and support for Stripe. Our support site provides answers on all types of situations, including account information, charges and refunds, and subscriptions information. Get your questions answered and find international support for Stripe.

sturdy fulcrumBOT Feb 9, 2024, 4:46 PM

#

finite sorrel Feb 9, 2024, 4:49 PM

#

👋 hopping in here since toby has to head out soon - give me a minute to catch up

sturdy fulcrumBOT Feb 9, 2024, 4:50 PM

#

abbas-connect-oauth

median ivy Feb 9, 2024, 4:50 PM

#

sure

finite sorrel Feb 9, 2024, 4:53 PM

#

So it looks like you mistakenly re-used the same authorization code you got from the oauth flow twice. We mention this in the note here (https://stripe.com/docs/connect/oauth-reference#post-token-request):

Per OAuth v2, this endpoint isn’t idempotent. Consuming an authorization code more than once revokes the account connection.

median ivy Feb 9, 2024, 4:54 PM

#

how did you check that?

#

i removed a previously added account via deauth

#

then created and oauth link, where i created a new stripe account

#

which then i passed to this

        grant_type: 'authorization_code',
        code: code,
    });

finite sorrel Feb 9, 2024, 4:59 PM

#

Is it posisble you accidentally visited the redirect URL twice and you have logic that automatically pulls the code and makes the authorization request? We have logs on our end that clearly tell us the same code was used twice (which is how I'm able to pull that so quickly)

median ivy Feb 9, 2024, 5:03 PM

#

since i dont have a front-end yet, when the success url hit, it resulted in not found, i then ran it from postman

finite sorrel Feb 9, 2024, 5:09 PM

#

Hmm... from the logs I don't actually see it being done through Postman - looks like it's happening with the node client library?

median ivy Feb 9, 2024, 5:13 PM

#

yes

#

my backend is on nodejs

#

but the success url is a un-secured get request i.e without jwt

#

ideally it would hit a deployed site which will take out the necessary params and call my node api with jwt

sturdy fulcrumBOT Feb 9, 2024, 5:16 PM

#

proven stump Feb 9, 2024, 5:17 PM

#

@median ivy I do think right now your code is causing the disconnection and that's what you need to check/track. Add logs before/after any call to try and figure out what's going on

median ivy Feb 9, 2024, 5:21 PM

#

what is meant by disconnection here?

proven stump Feb 9, 2024, 5:23 PM

#

You are a platform. You are asking an existing Stripe account to connect to your platform via OAuth. The last step of the flow is to finialize the connection with the OAuth Token API. That is what turns the ac_1234567 you get in the URL during the redirect and finishes the connection to give you access to their Stripe account.
The problem is that if you make that specific request twice it will disconnect the account immediately. That's what's happening here

median ivy Feb 9, 2024, 5:26 PM

#

you mean this one

proven stump Feb 9, 2024, 5:26 PM

#

yes

median ivy Feb 9, 2024, 5:28 PM

#

any ideas on how to not do this. as mentioned above, i have a rest API that uses JWT , without the jwt in header i cannot save the returned id in the db

proven stump Feb 9, 2024, 5:28 PM

#

yeah I don't really mean what any of those words mean in the sense of what's blocking you. Like what you need to do is make the call you took a picture of only once

median ivy Feb 9, 2024, 5:32 PM

#

ok so..

#

when i generate the OAuth, I pass success_url and reauth_url.

proven stump Feb 9, 2024, 5:34 PM

#

no you don't

#

there's no such thing as a "reauth_url" with our OAuth+Standard accounts integration

median ivy Feb 9, 2024, 5:35 PM

#

the success_url when called has code

#

ok wait

#

yes you are right

#

i do this

proven stump Feb 9, 2024, 5:36 PM

#

please don't post pictures of code.

median ivy Feb 9, 2024, 5:36 PM

#

i generate the oauth link

#

which has redirect_uri

proven stump Feb 9, 2024, 5:38 PM

#

sure, so what's the problem?

median ivy Feb 9, 2024, 5:38 PM

#

when onboarding is complete, and redirect_uri is hit, it has a code

#

then i call this

        grant_type: 'authorization_code',
        code: code,
    });```

#

which gives me a stripe_user_id so i can store it in db

#

but i need the ID (of the user on my db) so i can store this on their account (on my db)

#

is there a way to attach a header to the redirect_uri ?

proven stump Feb 9, 2024, 5:44 PM

#

no it's impossible to attach a header to that URL in any way. You basically have to special-case your logic/code. Usually we recommend using cookies/a session so that you know who they are when they come back

median ivy Feb 9, 2024, 5:48 PM

#

how can i see updated logs?

proven stump Feb 9, 2024, 5:48 PM

#

what does that mean "updated logs"?

median ivy Feb 9, 2024, 5:49 PM

#

but when i hoved i can see my time

proven stump Feb 9, 2024, 5:51 PM

#

I don't know what those words mean

#

what does "when I hoved" what does "I can see my time" mean?

median ivy Feb 9, 2024, 5:52 PM

#

can you tell by which url i can filter that call, the one you were talking about

#

thats being called twice

proven stump Feb 9, 2024, 5:52 PM

#

ah gotcha, it's impossible, that call will never appear there

#

So really you, as the developer fully controlling the code, have to add clear logs to your own code so that you can track it down

median ivy Feb 9, 2024, 5:53 PM

#

gotcha

#

and i gotta do the whole process again 😩 ?

proven stump Feb 9, 2024, 5:57 PM

#

what is "the whole process again" exactly?

median ivy Feb 9, 2024, 6:01 PM

#

the adding of stripe account

#

ok so, ive done that

#

can i post screenshot?

#

of the response im now getting

proven stump Feb 9, 2024, 6:03 PM

#

you should be able to write text developer to developer instead of pictures

median ivy Feb 9, 2024, 6:05 PM

#

you're very strict

#

this call generates the oauth link
request completed POST 200 /admins/stripe/link-account/init 184ms

#

then when the redirect_uri is hit on my server, i get this reponse, which is expected as no jwt
request completed GET 401 /admins/stripe/link-account/success?scope=read_write&code=ac_PX2SYn2nScKxQnWVHeWEISx745N735VY 3ms

proven stump Feb 9, 2024, 6:07 PM

#

you're very strict
yes! We help dozens of developers a day, I help 8 separate people right now in parallel. So having you be crisp and clear when you ask exact questions is how I can help you best

#

As far as I can tell, that ac_PX2SYn2nScKxQnWVHeWEISx745N735VY you did use it

median ivy Feb 9, 2024, 6:08 PM

#

i didnt mean to come off as rude

#

i really appreciate any and all the help

proven stump Feb 9, 2024, 6:08 PM

#

oh I don't think you're rude at all, I'm just explaining why I'm strict. I know it can be annoying when trying to get help

median ivy Feb 9, 2024, 6:09 PM

#

i hate this helpless state im in, im usually solving others problems

proven stump Feb 9, 2024, 6:09 PM

#

How did you connect that specific account? Did you use Postman again?

median ivy Feb 9, 2024, 6:10 PM

#

proven stump How did you connect that specific account? Did you use Postman again?

yes

#

then i use the response.stripe_user_id and save it to DB

proven stump Feb 9, 2024, 6:14 PM

#

yeah that's when you make the connection

median ivy Feb 9, 2024, 6:14 PM

#

so now im stumped, where is the duplicate happening?

proven stump Feb 9, 2024, 6:14 PM

#

and as far as I can tell it worked. Like right now that Stripe account is connected to your platform as expected

median ivy Feb 9, 2024, 6:14 PM

#

😱

proven stump Feb 9, 2024, 6:14 PM

#

the problem you had earlier is you had a bug somewhere where you make the /oauth/token call twice by mistake and it disconnected immediately

#

but here I see you go through OAuth and call it only once and the account is connected right now

#

if you made the exact same call again right now then it's immediately be disconnected

sturdy fulcrumBOT Feb 9, 2024, 6:15 PM

#

proven stump Feb 9, 2024, 6:15 PM

#

median ivy Feb 9, 2024, 6:15 PM

#

lol

#

ok so i have to block this call

proven stump Feb 9, 2024, 6:16 PM

#

yes

median ivy Feb 9, 2024, 6:19 PM

#

ok i just checked

#

i blocked it, and checked the v1/accounts call, and its showing

proven stump Feb 9, 2024, 6:19 PM

#

nice!

#

my advice: add logs before/after that specific call.

#

Then go through OAuth a few times and check if you ever get those logs twice (that's what causes the disconnection)

median ivy Feb 9, 2024, 6:20 PM

#

proven stump my advice: add logs before/after that specific call.

oh there will be logs. EVERYWHERE

#

so i hit it again and thankfully Authorization code expired

#

tysm koopajah 👍

#

all i need for payments and other stuff is this connected_account_id and no other ID. yes?

proven stump Feb 9, 2024, 6:24 PM

#

yes

median ivy Feb 9, 2024, 6:25 PM

#

thanks again

#abbas-connect-oauth