#50an6xy06r6n_api

1 messages · Page 1 of 1 (latest)

desert surgeBOT
raven wingBOT
#

Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.

desert surgeBOT
#

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1239992990525554800

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

cobalt violet
#
  1. How does a user complete the account link flow if the email address they're using is already associated with an Express account that uses a passwordless authentication flow? The account link page asks for a password, which is very confusing for our users if they don't have one for that account. There is a password reset link, but that just directs them to a generic password reset page, and it's not clear how that handles passwordless accounts.
  2. If the email on an existing Connect Standard account is changed, how does it affect the way that account is linked to other accounts that shared the same original email address? For example, how is authentication affected? Would they be able to change the password on that account without affecting the passwords on their other accounts? Also, will the account still show up in the dropdown list on the top left of their dashboard? Or will the dashboard for the modified account be separated? Will the user be logged out of the account once the email is changed?
  3. Once the email on an account is changed, is there any way to give the user a link to the login page where the email address is pre-filled (maybe via a query param or something)? It can be confusing to users if their authentication details change without any action on their part, so we want to make sure they're able to get back to their dashboard. I know we can do it if they're logged in via the /b/ route, so I was hoping there's something that can be done for logged-out users as well.
sharp pike
#

Hello! At a high level it's important to undersand that Stripe logins (usernames and passwords) are separate from Stripe accounts. A Stripe login might have access to many different Stripe accounts, which can be switched between using the account switcher in the top left corner of the Dashboard.

#

These types of questions are usually best handled by Stripe support, but you said you've already tried that, so let me see if I can find some useful information. It would help me to know what they said about these questions when you asked them in the meantime?

cobalt violet
#

Uh Stripe support didn't really seem to understand the question and linked me to a bunch of support articles that don't address the issues at all

cobalt violet
sharp pike
#

That's what I'm investigating now. 🙂

#

Looks like we don't currently support the case where someone first uses an email address to sign up for an Express account, then they try to use the same email for a Standard account. The guidance is to have them use a different email address.

#

If they used a different email address it would be an entirely separate login and wouldn't have any impact on their existing Express account.

#

Not finding anything about a way to prefill the email address when linking to the login pages.

#

We are considering supporting this as a feature request internally. I'll bump that feature request for you.

cobalt violet
#

Thanks! Were you able to find anything about what happens to an account's Stripe login when the email is changed?

sharp pike
#

Not sure I understand, can you provide more details?

cobalt violet
#

so if I have a connect account and a standard account, they share a login and I can switch between them on the dashboard, as we've established. But the connect platform owner can change the email address associated with my connect account. When they do that, does that affect the login that's linked to that account? It seems like it would, since as far as I can tell the logins are keyed off the account's email address

sharp pike
#

In the scenario you describe the platform wouldn't be able to change the email address the user uses to log into Stripe.

cobalt violet
#

Since I don't think the password can be directly copied over, does that put me (the user) in a password reset flow for the connect account? Is the connect account then de-linked in the dashboard from the standard account?

sharp pike
#

The platform could change other email addresses associated with the account, but not the the login email.

cobalt violet
#

Hmm, so https://docs.stripe.com/api/accounts/update#update_account-email doesn't change the login email? If that's the case then is there a way for us as the platform to see the login email? It would be really confusing for our support staff to help users troubleshoot auth issues if the email address we see on our end doesn't match what they use to log in

sharp pike
#

Yeah, as it says there: "This is only to make the account easier to identify to you." It has no material impact beyond that.

#

Any user that has the ability to log in directly to a Stripe surface, like the full Stripe Dashboard, or the Express Dashboard, has a login email that's managed entirely by that user and Stripe. Platforms can't change that login email.

#

Which states: "An email address associated with the account. It’s not used for authentication and Stripe doesn’t market to this field without explicit approval from the platform."

cobalt violet
#

Ah ok, that makes sense. So there's no way for us to see what that email is. What happens if the user changes their login email on their end? Does that create a new Stripe login?

sharp pike
#

It doesn't create a new login, it changes the email on the existing login/profile.

#

If a Standard or Express user changed their email I don't believe the platform would have any way to know that change happened, because that's a change to the user's Stripe login, which is separate from the platform relationship.

cobalt violet
#

ok, so stripe accounts on the same login can never be separated

sharp pike
#

No, they can. If you scroll down further on that same page you'll see a list of Stripe accounts you can access. If you press the ••• button next to one of them you can choose to leave the account, which disconnects your profile from that account. After that there would be no relationship between the profile/login and the Stripe account.

cobalt violet
#

oh ok, that does make sense. I guess my question is what happens to the authentication for that account in that case

sharp pike
#

Can you give me more details about the scenario you're describing?

cobalt violet
#

so let's say I have a standard account and a connect account on the same personal email, and I want to move the connect account to authenticate using a corporate email. How would I go about doing that? If I just disconnect my current login from the account then it sounds like it gets orphaned. Would I first have to invite my corporate email onto the account?

I think I'm starting to understand the distinctions here. So Stripe logins are basically users who can be attached to any number of accounts?

sharp pike
#

What does "connect account" mean? An Express account or something else?

#

I think I'm starting to understand the distinctions here. So Stripe logins are basically users who can be attached to any number of accounts?
Yes, exactly.

raven wingBOT
cobalt violet
#

are there parts of the login/account relationship that are hidden in the express case?

sharp pike
#

If only a single person is associated with a Stripe account I don't believe they can disconnect themselves from it, because there would be no one left on the account.

#

Express users (who only have an Express account) can only see the Express dashboard, which doesn't provide the list of accounts or "leave account" functionality.

cobalt violet
#

ah ok, so that's why it's not supported to have the email attached to other users

sharp pike
#

There are a lot of reasons why, but that's a related factor, yes.

cobalt violet
#

ok so then one more follow-up: Do any of these things change for Custom accounts? I ask because we may want to move to using Custom accounts in the future and I'm curious if we'll run into more issues with that

keen dirge
#

👋 jumping in as Rubeus needs to step away

#

give just a second to catch up on context

#

Do you mean if custom accounts get access to Stripe dashboard?

cobalt violet
#

I guess my question is if there is any special handling of the login/account relationship with Custom accounts

#

do custom accounts even get access to the dashboard?

keen dirge
#

no they don't. With custom accounts, you get control over the whole experience.

cobalt violet
#

so then in that case is there a restriction on connect accounts sharing emails with standard accounts? Since they won't be able to manage the user/account relationship on their end

keen dirge
#

Going to test it out just to be sure, give me just a sec

#

If I use the same email from an existing Stripe account (standard) for a new custom account, it works fine. So I think that should be okay.

cobalt violet
#

Hmm, but can the custom account be disconnected from the existing login after the fact?

keen dirge
#

Not sure what you mean by that. Custom accounts can't really login to Stripe.
You as a platform whitelabel the whole experience.

cobalt violet
#

right, so I'm wondering how/if onboarding a user onto a Custom account using an email that they use for an existing standard account will affect those existing accounts

#

is there no standalone authentication for Custom accounts?

keen dirge
#

It doesn't really affect existing accounts

#

is there no standalone authentication for Custom accounts?
Not on Stripe's end. You handle authentication for these yourself as a platform (part of the whitelabeled experience)

cobalt violet
#

gotcha. so Custom accounts exist without Stripe logins

#

Thanks for your help! Just curious, are you all on a particular team internally that is responsible for this support oncall? Or is it like an opt-in thing?

keen dirge
#

We're all part of the same team that functions across region 🙂

cobalt violet
#

what does the team do when you're not answering my inane questions? Sorry for being nosy, but I'm just intrigued by this Discord support model

keen dirge
#

All good! 🙂 I don't know how specific I can be but aside from developer support, our team also collaborates cross-functionally across product/sales/many other teams to improve products, developer experience and help bridge the gap between Products and end users in any way we can

cobalt violet
#

so do you guys also maintain the API documentation and such?

keen dirge
#

We don't actively write those ourselves but we do help improve them based on the trends we're seeing from user friction.

cobalt violet
#

makes sense. alright I'll let you go now lol. Thanks again for the help! @sharp pike as well