micorksen_code

[candid crystal]

👋 Welcome to your new thread!

⏲️ We'll be here soon! Typically we respond in a few minutes, but sometimes we might take a bit longer if the server is busy or if you have a particularly tricky question.

⏱️ We close idle threads, which makes them read-only. Once a thread is closed it won't be reopened, but you can always start a new thread if you have another question.

🔗 This thread will always be available, even after it's closed. You can find it again using Discord's search, or you can save this link: https://discord.com/channels/841573134531821608/1420309166542688257

📝 Have more to share? Add more details, code, screenshots, videos, etc. below.

[void sparrow]

To add some more context, I use Chatwoot and would like to enable User Identity Verification to avoid some additionnal screening questions. I use the live chat on my website.

https://www.chatwoot.com/hc/user-guide/articles/1677587479-how-to-enable-identity-validation-in-chatwoot

[rare sentinel]

Hi! You cannot put custom JS on the billing portal. I am not sure what you mean by below:

I thought about letting the user log in to the billing portal, then redirecting it to a webhook.

[void sparrow]

Well, I asked for help on Mister ChatGPT, which seem as confused as you and I, but he told me about a return_url… checked the parameter and I saw it was only when the user clicks on « Go back to the application » (something like that).

[rare sentinel]

To confirm, you wish to redirect the customer to another page from the billing portal correct?

[void sparrow]

Well, I would like to provide them with a link to the Hosted Billing page which would be some proof of ownership, then redirect them somewhere I would set my HMAC for next conversations

[rare sentinel]

You can use the return_url to redirect your customer to another page: https://docs.stripe.com/api/customer_portal/sessions/create#create_portal_session-return_url

[void sparrow]

Okay so I tell them: please click the link and they will log in,

After log in, they Will be redirected to my HMAC setter?

Because I see in the docs that they Will need to click

[rare sentinel]

When they are on the billing portal, there will be <- Return to XYZ. When the customer clicks on this, they will be redirected to the page you set for return_url.

[void sparrow]

Yeah but I want to make it like an OAuth link

I don’t want them to click Return to XYZ

[rare sentinel]

Sorry you wish to create an OAuth link for your customer on Stripe to validate their identity?

[void sparrow]

I don’t know how to explain, but just a seamless flow for the user so they validate the ownership of their account.

[rare sentinel]

Is this user an end customer or a Stripe connected account user who is connected to your Platform?

[void sparrow]

End customer on my website.

I host SaaS services (which don’t have a portal for Billing). So, I use Stripe Billing portal

[rare sentinel]

Validating your customer via an OAuth link is not available on Stripe.

[void sparrow]

I just made a parallel with OAuth link, but isn’t my question doable?

[rare sentinel]

You created an OAuth link for your customer on Stripe?

[void sparrow]

Let me reexplain from the beggining and do a parallel with a Billing portal like WHMCS.
In WHMCS, you can do OIDC to verify ownership of an account.
In Stripe, there is no OIDC but I would like to know an alternative to achieve the same thing.

[upbeat basin]

hi there! I'm taking over from my colleague and just getting caught up on this thread

[void sparrow]

Hi there! Gotta get back to work, but my next break is in one hour.

[upbeat basin]

no problem! I'll follow up on your question and if this thread closes due to inactivity you can always follow-up with a new thread 🙂

so it sounds like you want to validate/authenticate a user's ownership of their account (for example, through single-sign on or an OAuth link)

can you confirm if you want to do this: (a) before allowing the customer to access the Customer Portal, or (b) when navigating to your site from the customer portal (i.e. when navigating to the return_url from the Customer Portal)?

if it's (a), then it's not possible to integrate this type of authentication link with Stripe, to perform authentication when the customer is redirected to the Portal -- instead we recommend authenticating the customer first within your site, before redirecting to the Portal: https://docs.stripe.com/customer-management/integrate-customer-portal#:~:text=Be sure to authenticate customers on your site before creating sessions for them

for (b), I'm afraid this is similarly not possible, as the return_url is also a static link (intended to be to a page on your site)
https://docs.stripe.com/api/customer_portal/sessions/create#create_portal_session-return_url

you can set whatever you want in the return_url, so if you already have a URL where this authentication can be performed, you can set it in this field when creating the Portal Session -- but if you want to use Stripe to generate this authentication link, then I'm afraid this isn't something we currently support