#cht_api
untold sundialBOT
👋 Welcome to your new thread!
⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1273384245347225610
📝 Have more to share? Add more details, code, screenshots, videos, etc. below.
main geyser
What are you hoping to accomplish by creating or accessing a person on an individual account?
When you retrieve the Account object, what details are showing in the requirements hash?
rain inlet
Wow. Was honestly not expecting a response so quickly
Very cool... Thanks!
So in the requirements hash are things you would expect:
(pulling it up)
So past_due has things that you would expect... TOS acceptance, external account... and then a bunch of individual things... address.city, address.whatever, dob, email, id_number
main geyser
Right, so you would update those things using the individual parameter: https://docs.stripe.com/api/accounts/update#update_account-individual
rain inlet
Right but I do not want to have PII info on the server / logs
In all the other cases, I have been able to use a person token to forward on that data without it being decoded by me
And as discussed here: (https://docs.stripe.com/connect/account-tokens)
Tokens can be used only for:
Legal entity details (information about the business or individual)
"... Person Tokens provide a secure and reliable way to perform this task. Tokens ensure that personally identifiable information (PII) doesn’t touch your servers, so your integration can operate in a PCI-compliant way. "
main geyser
From the docs you posted:
If you onboard only individuals, you don’t need person tokens. Instead, create account tokens and pass the individual hash on the Account object to provide the required information.
Here's the section on creating Account Tokens: https://docs.stripe.com/connect/account-tokens#mobile-tokens
rain inlet
That section is only for iOS and Android... Does it extend to web?
That might have been a dumb question... Let me read a bit more
Okay I see now that the individual is a field on the account token
Sweet!
So one more follow-up... Can I use an account token to update the account details?
(appreciate the help!!)
main geyser
There's also Account links (Stripe-hosted onboarding/management) and the Connect embedded components (https://docs.stripe.com/connect/supported-embedded-components/account-onboarding), which are front-end components that submit info directly to Stripe from the client, so you don't have to worry about PII touching your server.
Many options, but it sounds like you found what you're looking for
rain inlet
I sure did... Thanks much... Just the follow-up
Can I use an account token to update the account details?
I think its a yes...
main geyser
Yep! Those docs (https://docs.stripe.com/connect/account-tokens) describe how to do that using stripe.js (https://docs.stripe.com/js/tokens?type=account)