#ecu_stripeapp-permissions
tacit daggerBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! We typically respond in a few minutes, but in some cases we might need a bit more time (e.g., server's busy, you've got a complex question, etc.).
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1248693277222502540
📝 Have more to share? Add details, code, screenshots, videos, etc. below.
covert vault
Hi 👋
What are you building here?
Those permissions look like they are related to a Stripe App
charred jackal
yes exactly, I am building an AB-testing platform which lets users create their own pricing tables
and these pricing tables have a payment button on them
that button takes users to the screenshot you see
using the checkout session api
covert vault
AB-testing platform
You mean, as a Stripe App? This exists within the Stripe Dashboard sandbox?
Can you share the checkout session creation request?
charred jackal
it lives on its own, but users connect with stripe using oauth2
the checkout session creation looks like this in Node:
const session = await stripe.checkout.sessions.create({
success_url: url,
cancel_url: url,
line_items: [lineItem],
mode: price.type === 'one_time' ? 'payment' : 'subscription',
});
I have everything working, just the permissions for the actual stripe checkout page don't work
but it gives me no hints which permission it actually needs
covert vault
Sorry what do you mean "it lives on it's own". Is this a Stripe Extension? How do your users connect to this application.
charred jackal
I'm honestly not sure what's it called. It says a "Stripe App" and users connect their stripe account using oauth2
I'm not sure what a Stripe Extension or Stripe App are or how they differ
covert vault
A Stripe Extension is just a flavor of Stripe App: https://docs.stripe.com/stripe-apps/migrate-extension
Essentially you only use the Stripe Appp installation as a way to get authorization to access the Accounts that install your app
Can you share the request ID for one of these Checkout Session requests?
It will start with req_
Here's how you can find a request ID: https://support.stripe.com/questions/finding-the-id-for-an-api-request
charred jackal
req_6u6exwz2mhhaRD
I guess I need payment_method_read, payment_method_write then?
since it's a payment method request
but why do I even need it? Cause user is adding a new CC during checkout?
covert vault
Yes, and if it's for a Subscription then we will need to save it to the customer
charred jackal
does that need some other access?
seems that payment_method_read, payment_method_write fixed it for now 👍
covert vault
Okay yeah that is what I was going to say too
Our internal logs show those permissions as missing
I'm glad you were able to fix it 🙂
charred jackal
thank you!
I will check logs next time, that helped understanding which request it made
covert vault
Great 🎉 Happy to help 🙂