#sinduri_code
lime wigeonBOT
đ Welcome to your new thread!
â˛ď¸ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
âąď¸ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
đ This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1308302719877910580
đ Have more to share? Add more details, code, screenshots, videos, etc. below.
Below are links to other discussions we've had with you in the past week in case you want to review that information. If your question is related to one of these previous discussions, please provide a comprehensive summary of the current state and what you need help with now. We help many users simultaneously, so a summary allows us to resolve your issue as soon as possible.
- sinduri_api, 5 days ago, 9 messages
- sinduri_api, 5 days ago, 23 messages
dreamy condor
hello! I'm not sure I understand the question. My question is, can we use restricted key for our platform account. I f I created a restricted key what might be the changes in this integration - what are you trying to use the restricted key for? Are you asking if you can use the restricted key for OAuth?
frosty tide
curl -X POST https://api.stripe.com/v1/oauth/token
-u sklive:XXX
-d code=acXX
-d grant_type=authorization_code
https://docs.stripe.com/stripe-apps/api-authentication/oauth#obtain-access-token
here, we are using platform accounts secret key to get the access token, if I created restricted kay, what would be the changes in this code?
dreamy condor
it probably wouldn't work, but you can try
frosty tide
Okay,
one more concern, can we make/accept any transactions or perform any actions using a stripe account's secret key or public key only through APIs or both required?
Because we suspect some malisious transactions
dreamy condor
this section of the docs explains each key in more detail : https://docs.stripe.com/keys. In short, the secret key is used server side and the publishable key is used client side.
The APIs on this page require the secret key : https://docs.stripe.com/api
The methods on this page use the publishable key : https://docs.stripe.com/js
At a high level, regarding a payment, how it typically works is that you would create the PaymentIntent with the secret key server-side, then collect the payment details and confirm with the publishable key client-side
tidal holly