#newtreyes_docs
1 messages ยท Page 1 of 1 (latest)
๐ Welcome to your new thread!
โฒ๏ธ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.
โฑ๏ธ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.
๐ This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1383032165301747755
๐ Have more to share? Add more details, code, screenshots, videos, etc. below.
Hi, @silent horizon
hello! looking at this now
Thank you
i'm fairly certain the short answer to your question is no - can you give me more details on why the payment element doesn't work for your use case?
๐
There's no easy answer to that ๐
But let me try: we have a Salesforce package that integrates with Salesforce but unfortunately, Salesforce won't allow Stripe.js to load on any page that is managed by Salesforce. So, we implemented a specially crafted Terminal that by using iFrames allows us to use the Card Element to integrate with Stripe.
Now, we know the Card Element is being deprecated so we have created a new Terminal that uses the Payment Element. But lots of our customers are still using the old one.
ahhhh, i've heard of similar struggles before
Now, some of those users would like to have Bacs in the old Terminal. That terminal doesn't work with Payment Element or the Checkout process. So... is there anything else we can use?
the closest thing that i could think of that might be possible is something akin to you collecting the account info and passing it along yourself (without using one of our payment surfaces) which may or may not be possible with BACS, i'd need to check
Got it... can you review this on your side to see if it would be possible?
i do know the payment intent API allows you to provide the account number and sort code but i've never tested it personally:
https://docs.stripe.com/api/payment_intents/create#create_payment_intent-payment_method_data-bacs_debit
(you can also try if you'd like)
Mmmmm... Is there any documentation on how to implement something like that securely?
I mean, sending card information like that is not usually recommended. I wonder if there are restrictions like that for Bacs information too.
yeah i was going to say something similar - we enable raw PAN info for some merchants but then they are responsible for a lot more security wise
Yeah
2 questions:
- is it possible
- is it secure / advisable
gonna attempt to answer them both in order ๐
hi! I'm taking over this thread. give me a few minutes to try this flow on my end.
Thank you, Soma
OK, I just tried it in test mode, and it requires you to pass billing_details and mandate_data. Unfortunately it's not possible by default to use mandate_data for BACS, so I get an error message:
Your account isn't configured to allow passing
mandate_datadirectly when confirming PaymentIntents for Bacs Direct Debits.
to enable that feature (passing mandate_data for bacs), you would need to ask Stripe support to check if your business is elligible or not: https://support.stripe.com/contact
but its probabbly simpler to just use Checkout Session or Payment Element to accept Bacs payments.
Oh, I bet it would be simpler
and I wish I could
Now, from the security perspective... is there any problem re collecting and passing bacs_debit information without using either the Checkout process or the payment element?
like I said above, it is possible, but only if your business gets approval to enable mandate_data when confirming PaymentIntents for Bacs Direct Debits.
by default it just won't work.
I guess my question is not if it's possible once approved but what are the security and compliance ramifications of such implementation.
that you would have to ask Stripe support directly for these questions
With CC information, I know there would be compliance ramifications if we collected CC information using our own forms instead of using Stripe's elements. Is that the case for Bacs too? If so, is there any documentation I can review to understand this?
yes handling raw credit card numbers requires your business to be PCI compliant.
I don't know, sorry. you would need to ask Stripe support.
That's OK