#techbond_api
runic martenBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1219224334040825946
📝 Have more to share? Add more details, code, screenshots, videos, etc. below.
versed ospreyBOT
rare orchid
But the Stripe dashboard is saying that some payments made by sending card details directly to Stripe
Can you share a screenshot please ?
Why you are using tokens ? and not using Stripe PaymentSheet ?
You need to follow this guide:
https://docs.stripe.com/payments/accept-a-payment?platform=react-native
velvet lintel
rare orchid
Can you share one of those charge Id ?
velvet lintel
I am currently working on a company, and fixing this issue
ch_3Ou1DsGyjGYV1j4Z0gvFUsLm
Here is the charge id
And also the dashboard is saying like this
rare orchid
They are sending card raw directly via the API using the /tokens API
You can check this request req_4xeFxCbEP585Ni
So they need to migrate and use PaymentSheet
velvet lintel
So sending card details directly to Stripe issue is occurding due to PaymentSheet?
velvet lintel
You can check this request `req_4xeFxCbEP585Ni`
And how can I check this request?
rare orchid
runic martenBOT
velvet lintel
But in this request, I can not find the card details. I can only see last 4 digits of Card Number
abstract kelp
Yep, we don't expose full card details via the API
velvet lintel
Hi Ynnoj. I know, but as you can see on above screenshots, the dashboard is saying that some payments made by sending card details directly to Stripe
abstract kelp
OK, seems correct based on the request my colleague shared. You need to migrate your extension to use your payment UIs, like Payment Sheet, to adhere to PCI compliance
abstract kelp
But in this request, I can not find the card details. I can only see last 4 digi...
We will obfuscate them in the Dashboard so not to expose the card data again
velvet lintel
OK, seems correct based on the request my colleague shared. You need to migrate ...
Okay, I will check the codebase again if we are using PaymentSheet or not.
velvet lintel
We will obfuscate them in the Dashboard so not to expose the card data *again*
So you mean, if we are using PaymentSheet, we can avoid sending card details ?
abstract kelp
Yes, you'd be using our embedded UI components to collect the data from customers in a PCI compliant manner so you won't handle the card details directly
velvet lintel
Of course, we are using embedded UI components
abstract kelp
Not according to this request: https://dashboard.stripe.com/logs/req_4xeFxCbEP585Ni
velvet lintel
let me check
abstract kelp
You're collecting card data somewhere and then using an Android SDK function to tokenize those card details via the API, which is flagging the PCI compliance requirement
abstract kelp
Seems that way yes
velvet lintel
So we need to avoid using this function?
abstract kelp
Well you should avoid handling raw card data entirely. Seems like you're persisting it in state via the setValidPaymentData hook/state?
Wherever you're collecting card data there and setting it
velvet lintel
abstract kelp
Yeah, don't do that. If you're using RN: https://docs.stripe.com/payments/accept-a-payment?platform=react-native&mobile-ui=payment-element
