#alex-bonine_best-practices
brittle yarrowBOT
đ Welcome to your new thread!
â˛ď¸ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question. Thank you for your patience!
âąď¸ We automatically close idle threads, which makes them read-only. Make sure you stick around to chat in realtime! If this thread is closed and you have another question you'll need to start a new thread.
đ This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1215032555787517952
đ Have more to share? You can add more detail below, including code, screenshots, videos, etc.
wise zephyrBOT
gloomy swallow
Hello
Going to need a bit more information -- are you asking how you, as the platform, interact with the Connected Accounts of your Connected Accounts?
hexed shoal
Basically, yes
I found this https://docs.stripe.com/connect/separate-charges-and-transfers#on-behalf-of for on_behalf_of but am not totally sure if it works as only certain web requests allow it.
Would something like:
gloomy swallow
Hmm I think you do want to use a Stripe App in this case
Let me check though
Yeah I think you want a Restricted Key app: https://docs.stripe.com/stripe-apps/api-authentication/rak
hexed shoal
If we use Stripe Apps' RAK authentication, are we able to use the RAK key instead our API key? Then the RAK key lets us act for the marketplace user and the stripeAccount header as the seller?
gloomy swallow
Yep
As long as that RAK key has the necessary permissions
Hmmm one sec actually
Let me see if RAK keys here can have Connect Write permissions...
This might not be possible actually. Give me a couple to get a firm answer here.
hexed shoal
It 'seems' like permissions like customer_write, checkout_session_write, etc would let us do some of that? https://docs.stripe.com/stripe-apps/reference/permissions#object
gloomy swallow
I'm not positive if that will let you act on Connected Accounts of that platform though.
I think it will, but I want to make sure. We generally prohibit "grandchild Connect relationships"
hexed shoal
Yeah, I was trying to figure out via https://docs.stripe.com/connect/enable-payment-acceptance-guide if there was a way to have the marketplace user (the child Connect Acct) log in and then get some kind of key to use when we create the Stripe node instance and use stripeAccount for the seller (grandchild) but couldn't get past storing their API key again.
gloomy swallow
Yeah there is the plugin route where these platforms simply provide you with a restricted key for their platform, but we don't want users to do that -- we do want you to use a Stripe App in place of a plugin. So I think this should be possible, the question is whether it is supported already or it is still in the works. Which I'm trying to get the current state on.
hexed shoal
Gotcha. Yeah, the plugin route is how we currently operate and have been trying to figure out how to handle all our use-cases.
gloomy swallow
Gotcha, I reached out to our Apps team to figure out the current state on this. I'm not sure when they will hear back. Your best bet here might be to instead write into our Support team via https://support.stripe.com/contact/login and ask them for clarification on this in terms of whether a Restricted Key App is the correct path to go here and they can correspond async and get a 100% answer.
If I hear back in the next few minutes I'll relay to you here.
But don't want to keep you waiting
hexed shoal
Okay, thanks!
We've been going back and forth with people from Stripe for the last month and have a second meeting on Monday but was hoping to figure out a solution before then and/or to go into the meeting with.
gloomy swallow
Yeah sorry I don't have a more firm answer for you. We don't really focus on Stripe Apps too much here, and there is a lot of development happening with it right now so a little hard to track the roadmap as well.
hexed shoal
No worries.
One further question I had about RAK I wonder if you could answer. From the image on https://docs.stripe.com/stripe-apps/api-authentication/rak, it appears like there are only live versions of keys. Do you know if there are any test versions of keys?
gloomy swallow
You should receive test keys when you test as shown at https://docs.stripe.com/stripe-apps/api-authentication/rak#test-app
hexed shoal
If we use our test API key when creating the RAK instance, is it safe to assume all of their things would be in the test version?
Gotcha. Looks like that's what that link says.
Well, maybe not. Are there published 'test' versions of Stripe Apps?
gloomy swallow
Yep I think if you want to test on another account then you use an external test app: https://docs.stripe.com/stripe-apps/test-app
Actually no
hexed shoal
We are a no-code platform so we have 1000s of users testing Stripe for flows before going live. We currently swap test and live keys depending on if the user is in test or live mode on our platform.
gloomy swallow
Okay yeah, just confirmed, during external testing there should be a dropdown where you can select the mode (live or test) for the install of that test app
So yes, that would be the way to do this and would result in test mode RAK keys
wise zephyrBOT
hexed shoal
but that's more for testing our app (which we would already published), not testing stripe calls by the user in a test environment
would we handle the different versions from within our Stripe App to handle whether we connect them to the test or live version and then make calls that way?